TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8888
@thehackernews
The Hacker News
Post content
Post content
⚠️ An unpatched critical flaw in Hugging Face’s LeRobot enables remote code execution (CVSS 9.3). Untrusted pickle over unauthenticated gRPC (no TLS) lets attackers take over servers, steal keys and models, and impact connected robots. 🔗 Details → https://thehackernews.com/2026/04/critical-cve-2026-25874-leaves-hugging.html