Downloads · 30 days
0
poc-pytorch-torchexport
0xiviel/poc-pytorch-torchexport
poc-pytorch-torchexport is a machine learning model from 0xiviel. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
This is a security research PoC. The payload is benign (creates a marker file).
Access
Public
Updated Feb 12, 2026
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
.py11.4 KB · 53%
At a glance
- Access
- Public
- Created
- Feb 12, 2026
- Updated
- Feb 12, 2026
- SHA
- 04374cd9
Model card
From the Hugging Face model README
PoC: Arbitrary Code Execution via torch.export.load()
This is a security research PoC. The payload is benign (creates a marker file).
Vulnerability
torch.export.load() silently falls back to weights_only=False when loading .pt2 model files,
enabling arbitrary code execution via pickle deserialization.
Reproduction
# WARNING: This demonstrates code execution. The payload is benign.
import torch
ep = torch.export.load("malicious_export.pt2")
# Check: /tmp/pytorch_export_ace_poc was created
Or use the full PoC script:
python poc_torchexport_ace.py
Affected
- PyTorch >= 2.6.0
- Tested on PyTorch 2.10.0
- Created
- Feb 12, 2026
- Updated
- Feb 12, 2026