CVE-2026-25874

Name of the Vulnerable Software and Affected Versions LeRobot versions prior to 0.6.0

Description An unsafe deserialization issue exists in the async inference pipeline of the policy server and robot client components. The software uses the pickle.loads() function to deserialize data received over unauthenticated gRPC channels that lack TLS (Transport Layer Security), a protocol used to encrypt communications. An unauthenticated network-reachable attacker can achieve arbitrary code execution on the server or client by sending a specially crafted pickle payload through the following gRPC calls:

Exploitation of this issue could lead to the compromise of the PolicyServer host and connected robots, theft of sensitive data such as API keys and SSH credentials, lateral movement within the network, denial of service, or threats to physical safety due to the control of robotic systems.

Recommendations Update LeRobot to version 0.6.0. As a temporary mitigation, restrict network access to the PolicyServer port to prevent unauthenticated remote access.