Gửi #953327: recommenders-team recommenders 1.2.1 rcethông tin

tiêu đềrecommenders-team recommenders 1.2.1 rce
Mô tảThe dict-loading path of MINDIterator exposes no switch or safe option, and no field in hparams can select a safe loader. No matter how the user configures it, all four dict files reach pickle.load through the same load_dict path. The pickle file format itself can carry an executable payload, so a benign dict and a malicious payload are indistinguishable at the byte level. The loading side therefore cannot validate file contents before deserialization fires, and no configuration-level defense has any point at which it could take effect.
Nguồn⚠️ https://github.com/recommenders-team/recommenders/issues/2368
Người dùng
 __lbz__ (UID 100868)
Đệ trình30/08/2026 10:15 (cách đây 24 ngày)
Kiểm duyệt22/09/2026 19:19 (23 days later)
Trạng tháiđược chấp nhận
Mục VulDB408550 [recommenders-team recommenders đến 1.2.1 Dict Loading mind_iterator.py pickle.load nâng cao đặc quyền]
điểm20

Want to know what is going to be exploited?

We predict KEV entries!