Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE

Security researchers have discovered a critical unpatched vulnerability in Hugging Face's LeRobot framework that could allow attackers to execute remote code without authentication. The flaw poses a significant risk to users of the popular robotics platform, and as of now, no patch has been released to address the security issue. Organizations using LeRobot are advised to take precautionary measures until a fix becomes available.