Downloads · 30 days
0
xiaoyaoes/clip-pytorch-rce
clip-pytorch-rce is a machine learning model from xiaoyaoes. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Malicious PyTorch model file that demonstrates RCE via torch.load() in CLIP.
Downloads · 30 days
0
Access
Public
Updated Jun 22, 2026
Repo size
—
Likes
0
Public
Click a slice to open those files.
.md389 B · 85%
From the Hugging Face model README
Malicious PyTorch model file that demonstrates RCE via torch.load() in CLIP.
Vulnerability: Insecure deserialization in clip/clip.py:136
state_dict = torch.load(opened_file, map_location="cpu")
torch.load() uses pickle under the hood, allowing arbitrary code execution when loading a malicious model.