LeRobot vulnerabilities
1 known vulnerability in LeRobot from Hugging Face. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
LeRobot: Deserialization of Untrusted Data
LeRobot through 0.6.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An