Verified65% confidenceFactExact time
Python's pickle module executes arbitrary Python code during deserialization, posing a security risk of remote code execution via maliciously crafted files.
3
Sources
65%
Confidence
Long-term
Relevance
8/20/2026
First Seen
Sources
Related Claims
VerifiedPython pickle格式在反序列化时可以执行任意代码，攻击者可以在模型文件中嵌入恶意代码78% similarVerifiedDue to the existence of the GIL (Global Interpreter Lock), Python only allows one thread to execute Python bytecode at any given moment, creating a bottleneck in CPU-intensive concurrent scenarios76% similarUnverifiedPython's built-in ast module can parse source files and statically extract dependency information without actually executing the code.76% similarUnverified早期的 PyTorch .pt 文件使用 Python 的 pickle 序列化，存在可执行任意代码的安全隐患76% similarUnverifiedThe trust_remote_code mechanism allows custom Python code from remote repositories to be executed when loading processors or tokenizers, which carries a security risk of being exploited by malicious models to execute arbitrary code.75% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/777381API
curl https://kongchang.com/api/v1/knowledge/claims/777381MCP
get_claim(id=777381)