You can deploy this model and start earning money today!

htdy7703/
safetensors-pytorch-safe-open-path-race-poc

Name: safetensors-pytorch-safe-open-path-race-poc
Availability: InStock

Views

No views yet

This PoC demonstrates a TOCTOU issue in the shipped PyTorch safe_open(..., framework="pt") mmap path.

What it shows:

SafeTensors validates the header from one file.
During the same load, the pathname can be atomically retargeted to a different file.
The returned PyTorch tensor bytes then come from the replacement file, not from the validated safetensors artifact.

What it does not show:

Verified runtime:

Run:

bash

PYTHONPATH=/mnt/data/huntr/.pydeps-safetensors \
python3 reproduce.py

htdy7703/safetensors-pytorch-safe-open-path-race-poc