YAML Metadata Warning:empty or missing yaml metadata in repo card
Check out the documentation for more information.
Security PoC โ autoprognosis load_from_file() cloudpickle.load RCE (autoprognosis/utils/serialization.py:33) (huntr MFV, responsible disclosure)
Benign proof-of-concept malicious model file. Loading it via the public API executes attacker code:
from autoprognosis.utils.serialization import load_from_file; load_from_file('<model.pkl>') # -> deserialize -> __reduce__ -> os.system -> RCE
Payload is harmless: it only writes a marker file (output of id). Do not load untrusted model files. Gated for protectai-bot review.
Inference Providers NEW
This model isn't deployed by any Inference Provider. ๐ Ask for provider support