CVE WATCH / VULNERABILITY DETAIL
CVE-2026-115533
UNKNOWNCVSS 0NVD feed
Published 26 October 2026 · tracked since 27 October 2026
Description
The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from_pretrained() method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically re
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-112646 MEDIUM 6.5
- CVE-2026-112651 HIGH 8.8
- CVE-2026-112634 MEDIUM 6.5
- CVE-2026-112637 HIGH 8.8
- CVE-2026-112629 MEDIUM 6.5
- CVE-2026-112633 MEDIUM 6.5
- CVE-2026-112623 HIGH 8.8
- CVE-2026-112626 HIGH 8.8
- CVE-2026-112614 MEDIUM 6.5
- CVE-2026-112485