Can you explain this vulnerability to me?

This vulnerability exists in the modelscope/ms-swift library up to version 2.6.1, where the function load_model_meta() in the ModelFileSystemCache() class uses pickle.load() to deserialize data from potentially untrusted sources. An attacker can craft a malicious serialized .mdl file that, when loaded, executes arbitrary code on the victim's machine. The malicious payload is hidden, making detection difficult, and the normal model training process continues without interruption, so the user remains unaware of the attack.

Useful 0 Not Useful 0

How can this vulnerability impact me? :

This vulnerability can lead to remote code execution on your machine if you load a malicious .mdl file during model training. An attacker can run arbitrary code or commands, potentially compromising your system, stealing data, installing malware, or causing other harmful effects without your knowledge.

Useful 0 Not Useful 0