datasets
Training and evaluation data, with the modality, task and licence stated up front. Listed live from the Hugging Face Hub.
pinnacle-optuna-dboptuna-logs-task-16toy-optuna-hpo-datasetoptuna-logs-task-17optuna-logs-task-22aetheris-optunaoptuna-pickle-rce-poc
optuna Pickle Deserialization RCE PoC (CWE-502)
Proof of Concept for arbitrary code execution via two independent pickle.loads() sinks in optuna <= 4.9.0 (latest on PyPI).
Vulnerability
optuna uses raw pickle.loads() on data from shared external storage backends with zero security mitigations:
Sink 1: CMA-ES Sampler (samplers/_cmaes.py:504)
return pickle.loads(bytes.fromhex(optimizer_str))
The CMA-ES sampler serializes optimizer state via… See the full description on the dataset page: https://huggingface.co/datasets/dududragos54/optuna-pickle-rce-poc.optuna-logs-task-21optuna-logs-task-19Segformer_B0_OPTUNAoptuna_traindsoptuna-logs-task-20optuna_storage