Datasetpublicgated

dududragos54/optuna-pickle-rce-poc

optuna Pickle Deserialization RCE PoC (CWE-502) Proof of Concept for arbitrary code execution via two independent pickle.loads() sinks in optuna <= 4.9.0 (latest on PyPI). Vulnerability optuna uses raw pickle.loads() on data from shared external storage backends with zero security mitigations: Sink 1: CMA-ES Sampler (samplers/_cmaes.py:504) return pickle.loads(bytes.fromhex(optimizer_str)) The CMA-ES sampler serializes optimizer state via… See the full description on the dataset page: https://huggingface.co/datasets/dududragos54/optuna-pickle-rce-poc.

sourceHugging Faceupdated 2mo agoView on Hugging Face

0likes6downloads

root

file.gitattributes2 KBdownload

fileREADME.md2 KBdownload

fileverify_bypass.py9 KBdownload

dududragos54/optuna-pickle-rce-poc · main · files are served by the source, never re-hosted here

This repository is gated. The listing is public, but downloading a file means accepting the publisher’s terms at Hugging Face first — the links above take you there rather than around it.