Downloads · 30 days
0
pytorch-legacy-zip-slip-poc
AgentRen/pytorch-legacy-zip-slip-poc
pytorch-legacy-zip-slip-poc is a machine learning model from AgentRen. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
This repository contains a single-member zip (malicious.zip) whose member filename is ../pwnedbyzipslip.txt.
Access
Public
Updated Feb 2, 2026
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 57%
At a glance
- Access
- Public
- Created
- Feb 2, 2026
- Updated
- Feb 2, 2026
- SHA
- b776063b
Model card
From the Hugging Face model README
PyTorch legacy zip fallback Zip Slip PoC
This repository contains a single-member zip (malicious.zip) whose member filename is ../pwned_by_zip_slip.txt.
When processed via PyTorch torch.hub.load_state_dict_from_url() legacy-zip fallback (torch/hub.py::_legacy_zip_load()), the call to ZipFile.extractall(model_dir) can write outside model_dir.
malicious.zip— PoC archivepoc.py— generator script
Relevant code (PyTorch master):
- Created
- Feb 2, 2026
- Updated
- Feb 2, 2026