CVE-2025-11844: medium-severity vulnerability in huggingface/smolagents
XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
The search_item_ctrl_f function in Hugging Face Smolagents unsafely combines user input into XPath queries without cleaning it first. An attacker can inject XPath code to access unintended elements, bypass filters, or disrupt automated web tasks.
XPath injection vulnerability in search_item_ctrl_f (src/smolagents/vision_web_browser.py) where user-supplied input is directly concatenated into XPath expressions without sanitization. An attacker can inject malicious XPath syntax to alter query logic, bypass filters, and access unintended DOM elements, potentially leading to information disclosure and disruption of web automation workflows. Fixed in version 1.22.0.
In the same product, most dangerous first.