Downloads · 30 days
9
19% of all-time downloads
rwkv7-vocab-test
d3banjan/rwkv7-vocab-test
rwkv7-vocab-test is a machine learning model from d3banjan. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
⚠️ SECURITY RESEARCH — DO NOT USE IN PRODUCTION ⚠️
All-time downloads
48
Public
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
.md3.5 KB · 58%
At a glance
- Access
- Public
- Created
- Mar 4, 2026
- Updated
- Mar 5, 2026
- SHA
- 789d9b4c
Model card
From the Hugging Face model README
RWKV7 Tokenizer eval() RCE — Proof of Concept
⚠️ SECURITY RESEARCH — DO NOT USE IN PRODUCTION ⚠️
This repository demonstrates CVE-pending arbitrary code execution via
eval() in keras_hub.models.RWKV7Tokenizer vocabulary loading.
Vulnerability
keras_hub/src/models/rwkv7/rwkv7_tokenizer.py lines 117 and 275
call eval() on each line of vocabulary.txt during preset loading.
The vocabulary file in this repo contains a payload that executes
touch /tmp/keras_hub_rwkv7_pwned to prove code execution.
Trigger
import keras_hub
tokenizer = keras_hub.models.RWKV7Tokenizer.from_preset(
"hf://d3banjan/rwkv7-tokenizer-eval-rce-poc"
)
# Check: ls -la /tmp/keras_hub_rwkv7_pwned
Fix
Replace eval() with ast.literal_eval() at lines 117 and 275.
- Created
- Mar 4, 2026
- Updated
- Mar 5, 2026