Downloads · 30 days
0
pickle-rce-poc
WolfpackArmy/pickle-rce-poc
pickle-rce-poc is a machine learning model from WolfpackArmy. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Arbitrary Code Execution via pickle.load() deserialization (CWE-502)
Access
Public
Updated Apr 12, 2026
Repo size
292 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 67%
At a glance
- Access
- Public
- Created
- Apr 12, 2026
- Updated
- Apr 12, 2026
- SHA
- 4b1e6367
Model card
From the Hugging Face model README
Pickle Model File ACE PoC
Vulnerability
Arbitrary Code Execution via pickle.load() deserialization (CWE-502)
Files
poc_evil.pkl— Malicious .pkl, executes code on pickle.load()poc_stealth.pkl— Stealth variant disguised as an sklearn modelbenign.pkl— Clean pickle file for comparison
Reproduce
import pickle
# WARNING: Executes arbitrary code
with open('poc_evil.pkl', 'rb') as f:
obj = pickle.load(f)
- Created
- Apr 12, 2026
- Updated
- Apr 12, 2026