Modelpublic

th3-j0k3r/coremltools-torch-load-rce-poc

sourceHugging Facemitupdated 4mo agoView on Hugging Face

0likes

Model Card

Security Research PoC — coremltools SKMPalettizer torch.load() RCE

Demonstrates unsafe torch.load() in coremltools/optimize/torch/palettization/sensitivekmeans.py:649

python

import torch
torch.load('sensitivity.pt')
# Prints: [VULNERABLE] coremltools torch.load() RCE:
# uid=501(user) gid=20(staff) ...