Datasetpublicgated

dududragos54/optuna-pickle-rce-poc

optuna Pickle Deserialization RCE PoC (CWE-502) Proof of Concept for arbitrary code execution via two independent pickle.loads() sinks in optuna <= 4.9.0 (latest on PyPI). Vulnerability optuna uses raw pickle.loads() on data from shared external storage backends with zero security mitigations: Sink 1: CMA-ES Sampler (samplers/_cmaes.py:504) return pickle.loads(bytes.fromhex(optimizer_str)) The CMA-ES sampler serializes optimizer state via… See the full description on the dataset page: https://huggingface.co/datasets/dududragos54/optuna-pickle-rce-poc.

sourceHugging Faceupdated 2mo agoView on Hugging Face

0likes6downloads

settings

This repository belongs to dududragos54 on Hugging Face.

CoolFace never edits a repository it does not host. Visibility, licence, collaborators and gating are all managed at the source.

nameoptuna-pickle-rce-poc

visibilitypublic

licencenot set

gatedyes

ownerdududragos54

Account settings