dududragos54/optuna-pickle-rce-poc

optuna Pickle Deserialization RCE PoC (CWE-502) Proof of Concept for arbitrary code execution via two independent pickle.loads() sinks in optuna <= 4.9.0 (latest on PyPI). Vulnerability optuna uses raw pickle.loads() on data from shared external storage backends with zero security mitigations: Sink 1: CMA-ES Sampler (samplers/_cmaes.py:504) return pickle.loads(bytes.fromhex(optimizer_str)) The CMA-ES sampler serializes optimizer state via… See the full description on the dataset page: https://huggingface.co/datasets/dududragos54/optuna-pickle-rce-poc.