Downloads · 30 days
0
pytorch-pickle-rce-poc
WolfpackArmy/pytorch-pickle-rce-poc
pytorch-pickle-rce-poc is a machine learning model from WolfpackArmy. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Arbitrary Code Execution via pickle deserialization in torch.load() (CWE-502)
Access
Public
Updated Apr 12, 2026
Repo size
9.3 KB
Likes
0
Public
Repo makeup
Click a slice to open those files.
.pt9.3 KB · 81%
At a glance
- Access
- Public
- Created
- Apr 12, 2026
- Updated
- Apr 12, 2026
- SHA
- df855b84
Model card
From the Hugging Face model README
PyTorch Model File ACE via Pickle Deserialization PoC
Vulnerability
Arbitrary Code Execution via pickle deserialization in torch.load() (CWE-502)
Files
poc_torchsave.pt— Malicious .pt file, executes code on torch.load()poc_evil_statedict.pt— Malicious state_dict with embedded payloadbenign_model.pt— Clean model for comparisonbenign_torchscript.pt— Clean TorchScript model
How to reproduce
import torch
# WARNING: This executes arbitrary code
model = torch.load('poc_torchsave.pt', weights_only=False)
# Creates pwned.txt as proof of execution
Impact
Any application loading untrusted .pt files with weights_only=False gets arbitrary code execution.
- Created
- Apr 12, 2026
- Updated
- Apr 12, 2026