Arbitrary Code Execution via PyTorch Pickle Serialization
Technical analysis of Python's Pickle Virtual Machine vulnerabilities in ML models, __reduce__ method exploitation, and transitioning to Safetensors.
3 docs tagged with "pickle"
View all tagsPython Pickle RCE: The Architecture of Deserialization Exploits
A deep technical breakdown of the Python Pickle Virtual Machine (PVM), the __reduce__ magic method, and how ML models are weaponized for Remote Code Execution.
Secure Consumption of Hugging Face Artifacts
Technical analysis of Pickle Virtual Machine vulnerabilities, Git LFS pointer manipulation, and enforcing cryptographic integrity for downloaded ML models.