Vulnerability	Vulnerable Version
L Deserialization of Untrusted Data verl is a verl: Volcano Engine Reinforcement Learning for LLM Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the `torch.load` function in the `model_merger.py` script when processing user-supplied `.pt` files with `weights_only=False`. An attacker can achieve arbitrary code execution by providing a maliciously crafted model file that is loaded by the script. This is only exploitable if the victim downloads and places a malicious model file in a local directory with a specific filename pattern. Note: In version 0.4.0, `model_merger.py` was removed. How to fix Deserialization of Untrusted Data? Upgrade `verl` to version 0.4.0 or higher.	[,0.4.0)

Deserialization of Untrusted Data

verl is a verl: Volcano Engine Reinforcement Learning for LLM

Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the torch.load function in the model_merger.py script when processing user-supplied .pt files with weights_only=False. An attacker can achieve arbitrary code execution by providing a maliciously crafted model file that is loaded by the script. This is only exploitable if the victim downloads and places a malicious model file in a local directory with a specific filename pattern.

Note: In version 0.4.0, model_merger.py was removed.

How to fix Deserialization of Untrusted Data?

Upgrade verl to version 0.4.0 or higher.

[,0.4.0)

Go back to all versions of this package