CVE-2026-4963
Code injection in Huggingface Smolagents
CVSS score
10.0
EPSS probability
%0.6
Risk score
0.1
Published
7 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
https://gist.github.com/YLChen-007/35b7d46e892266a0ed6dbe57802858be
Makefile Go / Python
https://gist.github.com/YLChen-007/7146f45960f79bc1e2976fed526e0a9b
Makefile Go / Python
NVD reference
https://vuldb.com/?submit.777623
Makefile Go / Python
NVD reference
https://vuldb.com/?submit.777643
Makefile Go / Python
NVD reference
https://vuldb.com/?submit.777644
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2026-25874Deserialization of untrusted data in Huggingface Lerobot
Patch verified Public Exploits:3EPSS %16
8.8
CVE-2026-44827Code injection in Huggingface Diffusers
Patch status unknown Public Exploits:1EPSS %1
7.8
CVE-2026-4372Deserialization of untrusted data in Huggingface Transformers
Patch verified Public Exploits:1EPSS %1
8.0
8.7
CVE-2026-57845Hugging Face Datasets through 5.1.0 Pickle Deserialization RCE via Pandas Builder
Patch verified Public Exploits:1EPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-4963"