collisions icon indicating copy to clipboard operation
collisions copied to clipboard

Reusable UniColl MD5 collisions on Pickle files

Open kryjak opened this issue 3 months ago • 0 comments

Hello, I adapted your methodology to create reusable MD5 collisions between Pickle files, based on UniColl. Please see here for details. I also tried doing the same for Safetensors, but failed - I don't think it's possible because it's a much more rigid file structure. I would appreciate:

  • having my PR reviewed
  • letting me know if you think there are other AI-relevant file formats that can be exploited similarly
  • letting me know if you have in mind some realistic attack scenarios specific to Pickle files, or any improvements over this work

kryjak avatar Nov 20 '25 00:11 kryjak