Wiz Hugging Face Cross-Tenant Compromise via Malicious Pickle Model
Date: 2024-04
Affected: Hugging Face
Attack vector: supply-chain
Category: research
Severity: Critical

Wiz compromised Hugging Face's inference service by uploading a malicious pickle-based model, escaping the container, and gaining cross-tenant access to other customer models.


Mitigations:

Architectural layers (MAESTRO):