CVE-2026-25874
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
LeRobot through version 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated network-reachable attacker can achieve arbitrary code execution on the server or client by sending a crafted pickle payload through the SendPolicyInstructions, SendObservations, or GetActions gRPC calls.
Risk Assessment
The organization is at risk of full system compromise in environments using LeRobot, potentially leading to data theft, service disruption, or lateral movement within the network.
Recommendation
Immediately upgrade LeRobot to a version newer than 0.5.1, enforce authentication and TLS encryption for gRPC channels, and consider replacing pickle with a safer serialization format such as JSON or msgpack.
Original NVD description (English source)
LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated network-reachable attacker can achieve arbitrary code execution on the server or client by sending a crafted pickle payload through the SendPolicyInstructions, SendObservations, or GetActions gRPC calls.