Downloads · 30 days
0
nemo-unsafe-load-poc
elliottower2/nemo-unsafe-load-poc
nemo-unsafe-load-poc is a machine learning model from elliottower2. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
15+ core code locations call torch.load() without weightsonly=True. modelPT.py:1414, adaptermixins.py:964, dataset.py (12 instances). Enables pickle-based RCE from crafted .ckpt files.
Access
Public
Updated Apr 5, 2026
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 88%
At a glance
- Access
- Public
- Created
- Apr 5, 2026
- Updated
- Apr 5, 2026
- SHA
- 44d8c6de
Model card
From the Hugging Face model README
NeMo Unsafe torch.load PoC
15+ core code locations call torch.load() without weights_only=True. modelPT.py:1414, adapter_mixins.py:964, dataset.py (12 instances). Enables pickle-based RCE from crafted .ckpt files.
- Created
- Apr 5, 2026
- Updated
- Apr 5, 2026