CyberRota Analysis
AI-GeneratedThe OneCompression library version 1.2.0 is vulnerable to an unsafe deserialization flaw that enables attackers to execute arbitrary code by providing a specially crafted model.pt checkpoint file. This vulnerability arises from the unguarded invocation of Python's pickle mechanism during the loading process, allowing malicious payloads to be executed. Organizations utilizing this library, particularly those in machine learning or data processing, should prioritize remediation to mitigate the risk of remote code execution.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Fujitsu Research's OneCompression library before 1.2.1 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.load_quantized_model_pt() unconditionally calls torch.load with weights_only=False, invoking Python's pickle machinery during deserialization. Attackers can embed malicious __reduce__ methods in a crafted model checkpoint to execute arbitrary Python code, including system commands, when the library loads the file from a caller-selected model directory.