← Vulnerability feed

Vulnerability record · CVE-2025-11844 · published 22 October 2025

CVE-2025-11844: Huggingface smolagents vulnerability

Huggingface · Smolagents

Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ctrl_f function located in src/smolagents/vision_web_browser.py. The function constructs an XPath query by directly concatenating user-supplied input into the XPath expression without proper sanitization or escaping. This allows an attacker to inject malicious XPath syntax that can alter the intended query logic. The vulnerability enables attackers to bypass search filters, access unintended DOM elements, and disrupt web automation workflows. This can lead to information disclosure, manipulation of AI agent interactions, and compromise the reliability of automated web tasks. The issue is fixed in version 1.22.0.

5.4 CVSS 3.0 Medium EPSS 0.28% · top 81.3% CWE-643 · CWE-643
5.4CVSS 3.0 base score
0.28%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
3References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ctrl_f function located in src/smolagents/vision_web_browser.py. The function constructs an XPath query by directly concatenating user-supplied input into the XPath expression without proper sanitization or escaping. This allows an attacker to inject malicious XPath syntax that can alter the intended query logic. The vulnerability enables attackers to bypass search filters, access unintended DOM elements, and disrupt web automation workflows. This can lead to information disclosure, manipulation of AI agent interactions, and compromise the reliability of automated web tasks. The issue is fixed in version 1.22.0.

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/huggingface/smolagents/commit/f570ed5e17999d4cf7d5e79c2830fbaefab8a794 Patch
https://huntr.com/bounties/01ab4405-9bca-4b26-b7a3-5ca1863a69b4 ExploitThird Party Advisory
https://huntr.com/bounties/01ab4405-9bca-4b26-b7a3-5ca1863a69b4 ExploitThird Party Advisory

Track CVE-2025-11844 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2025-5120Huggingface smolagents code injection vulnerabilityA sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environ…EPSS 25%2.1CVE-2026-4963Huggingface smolagents injection vulnerabilityA weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluate_augassign/evaluate_call/evaluate_with of the…EPSS 0.73%2.1CVE-2026-2654Huggingface smolagents server-side request forgery (ssrf) vulnerabilityA weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExec…EPSS 0.55%

Source: NIST National Vulnerability Database (record CVE-2025-11844), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.