PaddlePaddle CIFAR Pickle RCE PoC
Reported to huntr by xiaoyaoes
Vulnerability
2 unprotected pickle.load() paths in CIFAR dataset loading:
python/paddle/vision/datasets/cifar.py:206
python/paddle/dataset/cifar.py:80
Same pattern as torchvision CIFAR. Zero protection. Malicious dataset → RCE.