Downloads · 30 days
0
safetensors-handle-api-local-read-poc
htdy7703/safetensors-handle-api-local-read-poc
safetensors-handle-api-local-read-poc is a machine learning model from htdy7703. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
This PoC demonstrates that the shipped importable safeopenhandle(...) API in safetensors 0.8.0 ignores the supplied file-like object's bytes and reopens its .name path instead.
Access
Public
Updated Jul 8, 2026
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 50%
At a glance
- Access
- Public
- Created
- Jul 8, 2026
- Updated
- Jul 8, 2026
- SHA
- 3edfc7b8
Model card
From the Hugging Face model README
This PoC demonstrates that the shipped importable _safe_open_handle(...) API in safetensors 0.8.0 ignores the supplied file-like object's bytes and reopens its .name path instead.
What this PoC shows:
- the affected surface is
safetensors._safe_open_handle(...) - the supplied object can contain non-SafeTensors bytes
- the loader still returns tensors from a different local
.safetensorsfile named by.name
What this PoC does not show:
- arbitrary local file read of non-SafeTensors files
- impact on the documented pathname-based
safe_open(path, ...)API - remote code execution
Verified runtime:
safetensors 0.8.0numpy 2.5.1
- Created
- Jul 8, 2026
- Updated
- Jul 8, 2026