Modelpublic

ryansecuritytest-fanpierlabs/poc-smolagents-path-traversal-rce

sourceHugging Faceupdated 6mo agoView on Hugging Face

0likes

Model Card

smolagents Agent.from_folder() Path Traversal → RCE

Tool names in agent.json are not validated. ../ in tool names reads and exec()s files outside the tools/ directory.

Affected: smolagents/agents.py:1133-1135

python

# agent.json: {"tools": ["../evil"]}
# Reads: folder/tools/../evil.py = folder/evil.py (outside tools/)
# Then: exec(evil_code) → RCE