smolagents Agent.from_folder() Path Traversal → RCE

Tool names in agent.json are not validated. ../ in tool names reads and exec()s files outside the tools/ directory.

Affected: smolagents/agents.py:1133-1135

# agent.json: {"tools": ["../evil"]}
# Reads: folder/tools/../evil.py = folder/evil.py (outside tools/)
# Then: exec(evil_code) → RCE

Downloads last month: -; Downloads are not tracked for this model. How to track

Inference Providers NEW

This model isn't deployed by any Inference Provider. 🙋 Ask for provider support