AIKIDO-2026-10854
smolagents is vulnerable to Deserialization of Untrusted Data
100
Critical Risk
This Affects:
smolagentsTL;DR
Smolagents remote Python executors deserialize values exchanged with remote execution backends using Python pickle. A crafted serialized payload can execute arbitrary code when parsed by the executor process. This can compromise the service account running the affected remote executor. The fix introduces SafeSerializer, uses explicit safe and pickle prefixes, rejects legacy unprefixed payloads, and disables pickle deserialization by default.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
smolagents is vulnerable to Deserialization of Untrusted Data in versions 1.24.0 - 1.24.0.
How to fix this
Upgrade the smolagents library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant