Downloads · 30 days
0
xiaoyaoes/pickle-rce-poc
pickle-rce-poc is a machine learning model from xiaoyaoes. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
This model demonstrates arbitrary code execution via pickle deserialization. Loading with pickle.load() executes system commands.
Downloads · 30 days
0
Access
Public
Updated Jun 1, 2026
Repo size
60 B
Likes
0
Public
Click a slice to open those files.
Other1.5 KB · 81%
From the Hugging Face model README
This model demonstrates arbitrary code execution via pickle deserialization.
Loading with pickle.load() executes system commands.
Unrestricted pickle deserialization allows arbitrary Python code execution when loading ML model files from untrusted sources.
pickle