Downloads · 30 days
0
torchao-unsafe-deser-poc
etwithin/torchao-unsafe-deser-poc
torchao-unsafe-deser-poc is a machine learning model from etwithin. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Multiple unsafe deserialization paths in torchao:
Access
Public
Updated Mar 6, 2026
Repo size
1.9 KB
Likes
0
Public
Repo makeup
Click a slice to open those files.
.pth1.8 KB · 46%
At a glance
- Access
- Public
- Created
- Mar 6, 2026
- Updated
- Mar 6, 2026
- SHA
- 5bb2280e
Model card
From the Hugging Face model README
torchao Unsafe Deserialization ACE PoC
Multiple unsafe deserialization paths in torchao:
torchao/kernel/autotuner.py:pickle.load(f)on autotuner cache filestorchao/prototype/spinquant/_hadamard_matrices.py:pickle.load(source)on data filestorchao/prototype/quantization/autoquant_v2.py:torch.load(subgraph_fname, weights_only=False)
All paths allow arbitrary code execution from malicious files.
- Created
- Mar 6, 2026
- Updated
- Mar 6, 2026