This vulnerability in huggingface smolagents 1.25.0.dev0 involves code injection through the functions evaluate_augassign, evaluate_call, and evaluate_with in src/smolagents/local_python_executor.py. It stems from an incomplete fix of CVE-2025-9959, enabling remote attackers to execute arbitrary code. The CVSS 4.0 base score is 5.3, indicating medium severity, with network attack vector, low complexity, no privileges required, and user interaction needed. The vendor has not responded and no patch or mitigation is currently documented.

Successful exploitation allows remote code injection, potentially enabling attackers to execute arbitrary code within the context of the vulnerable application. This could lead to unauthorized actions depending on the environment where smolagents is deployed. However, the CVSS score and vector indicate limited impact due to required user interaction and low confidentiality, integrity, and availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should avoid using the affected version (1.25.0.dev0) in production environments or apply any community-provided mitigations if available. Monitor official channels for updates or patches from huggingface.