Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCEThe Hacker News·Apr 28, 11:19 UTC · Apr 28, 2026VulnerabilityCVE-2026-2587460