Snakinya

Insecure deserialization occurs when pretrained model checkpoints are loaded using the `torch.load` function with the `weights only` variable set to `False`. This allows arbitrary code execution if an attacker provides a specially crafted malicious checkpoint file. The issue can be triggered during the initialization or fine-tuning path, potentially granting an attacker full control over the system running the software.

This issue is related to the deserialization of untrusted data, allowing an attacker to bypass security measures using `t`. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation include the use of `t` to bypass security. No specific API endpoints, vulnerable parameters, or function names are mentioned.

The issue is an arbitrary file read vulnerability. It can be exploited via the interface "/testConnection".