CVE-2024-3660-PoC

CVE-2024-3660 – TensorFlow Keras における悪意あるモデルによる任意コード実行 概要 CVE-2024-3660 は、TensorFlow の Keras フレームワークにおける任意コード実行の脆弱性で、バージョン \ --build-arg LPORT= \ -t tfimg . && \ containerid=$docker create tfimg && \ docker cp $containerid:/CVE20243660/CVE20243660.h5 ./CVE20243660.h5 && \ docker rm $containerid 2...

CVE-2026-22807_Range

🛡️ CVE-2026-22807 Simulation: AI Supply Chain RCE Target Range ⚠️ 免责声明 / Disclaimer 本项目仅用于安全研究与教学目的 ，旨在演示 AI 模型加载过程中的供应链攻击原理（Remote Code Execution）。 请勿在生产环境中使用生成的恶意模型，也严禁将本项目用于任何非法攻击行为。开发者不承担任何因使用不当造成的法律责任。 📖 项目简介 Introduction 这是一个轻量级的 Python 靶场，用于模拟和复现 CVE-2026-22807 （一个典型的 AI 供应链漏洞逻辑）。 该靶场演示了当 AI...

CVE-2026-0596-Reproduction

CVE-2026-0596: MLflowエコシステムにおける安全でないデシリアライゼーションによる任意コード実行 mlflow==2.11.1およびmlserver==1.3.5における信頼できないモデル読み込みパイプラインに関連する検証、基礎メカニズム、アーキテクチャ上の脆弱性を詳述した包括的なセキュリティ研究レポート。 ⚠️ 脆弱性インテリジェンス勧告: CVE-2026-0596 指標| 詳細 ---|--- 脆弱性ID| CVE-2026-0596 / GHSA-rvhj-8chj-8v3c 共通脆弱性タイプ| CWE-78: OSコマンドインジェクション CVSS...

CVE-2025-32434

CVE-2025-32434: PyTorch RCE脆弱性 - PoC CVE-2025-32434とは？ CVE-2025-32434 は、深層学習やニューラルネットワークで広く使用されるPythonライブラリPyTorchにおける、重大なリモートコード実行（RCE）脆弱性です。 中心的な問題...

CVE-2026-47117-openmed-rce

CVE-2026-47117: OpenMed 通过 PII 模型加载实现未认证远程代码执行 严重性： 严重，CVSS 4.0 9.3 ，CVSS 3.1 9.8 （由 VulnCheck（CNA）评定） 向量（v4.0）： CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 向量（v3.1）： CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 受影响版本： OpenMed 1.5.2 修复版本： 1.5.2 CWE： CWE-94（对代码生成的错误控制，代码注入） 报告者...

CVE-2026-100308

A flaw was found in GluonTS. The model loading component fails to safely handle untrusted data during deserialization, which can allow an attacker to execute arbitrary commands with the privileges of the running process. An attacker can exploit this issue by convincing a user or system to load a...

CVE-2026-100308

Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a crafted serialized model directory. To remediate this issue, use...

CVE-2026-100308 GluonTS arbitrary command execution during model deserialization

Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a crafted serialized model directory. To remediate this issue, use...

CVE-2026-100308 GluonTS arbitrary command execution during model deserialization

Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a crafted serialized model directory. To remediate this issue, use...

CVE-2026-100308 GluonTS arbitrary command execution during model deserialization

Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a crafted serialized model directory. To remediate this issue, use...

EUVD-2026-88979

Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a crafted serialized model directory. To remediate this issue, use...

CVE-2026-100308

The Amazon GluonTS library is vulnerable to arbitrary command execution in versions prior to 0.17.0 . The root cause is the deserialization of untrusted data within the model loading component, which may allow context-dependent attackers to execute OS commands with the privileges of the loading p...

PT-2026-102633

Name of the Vulnerable Software and Affected Versions Amazon GluonTS versions prior to 0.17.0 Description Deserialization of untrusted data in the model loading component allows context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process b...

CVE-2026-100308: Deserialization of Untrusted Data

Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a crafted serialized model directory. To remediate this issue, use...

CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json

Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...

EUVD-2026-88318

Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...

CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json

Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...

PT-2026-99916

Name of the Vulnerable Software and Affected Versions Unsloth Zoo versions 2025.9.9 through 2026.8.13 Unsloth versions 2025.9.9 through 2026.8.19 Description A code injection issue exists in the model-loading compile path. The get transformers model type function in hf utils.py collects model typ...

CVE-2026-54559 PocketSphinx: Buffer overflows in language and acoustic model loading code

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngrammodeltrie.c do not adequately validate boundary conditions in ARPA, DMP, and binary format headers, and the acoustic-model loaders in src/mdef.c and src/util/bio.c use sscanf with unbounded...

CVE-2026-54559 PocketSphinx: Buffer overflows in language and acoustic model loading code

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngrammodeltrie.c do not adequately validate boundary conditions in ARPA, DMP, and binary format headers, and the acoustic-model loaders in src/mdef.c and src/util/bio.c use sscanf with unbounded...