AI agent vulnerability · smolagents

CVE-2025-11844: Hugging Face Smolagents XPath injection vulnerability in the search_item_ctrl_f function

mediumCVSS 3.0 5.4GHSA-8mf9-rmgw-33qc

Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the searchitemctrlf function located in src/smolagents/visionwebbrowser.py. The function constructs an XPath query by directly concatenating user-supplied input into the XPath expression without proper sanitization or escaping. This allows an attacker to inject malicious XPath syntax that can alter the intended query logic.

Published Oct 22, 2025

Affected packages

smolagents

Ecosystem: PyPI
Affected: < 1.22.0
Fixed in: 1.22.0
Check: pip show smolagents

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ctrl_f function located in src/smolagents/vision_web_browser.py. The function constructs an XPath query by directly concatenating user-supplied input into the XPath expression without proper sanitization or escaping. This allows an attacker to inject malicious XPath syntax that can alter the intended query logic. The vulnerability enables attackers to bypass search filters, access unintended DOM elements, and disrupt web automation workflows. This can lead to information disclosure, manipulation of AI agent interactions, and compromise the reliability of automated web tasks. The issue is fixed in version 1.22.0.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More smolagents vulnerabilities

All smolagents entries