Unverified50% confidenceFactExact time
Hugging Face已采取SafeTensors格式替代不安全的Pickle序列化，并部署了恶意文件扫描机制
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
8/28/2026
First Seen
Valid until: 11/26/2026
Sources
Related Entities
Related Claims
VerifiedSafeTensors是Hugging Face推出的安全序列化格式，支持零拷贝内存映射加载，并消除反序列化时的任意代码执行安全风险80% similarVerifiedHugging Face disclosed a security incident in which it detected and contained an attack by a suspected autonomous AI system that found a vulnerability and accessed data it should not have been able to access.73% similarVerifiedWhen Hugging Face used U.S. commercial model APIs for forensic analysis, the models' safety guardrails rejected requests involving exploit code and attack artifacts.70% similarUnverifiedsafetensors等安全格式正在推广作为pickle格式的替代，但大量存量模型仍使用pickle格式68% similarUnverifiedSafeTensors uses a simple header-plus-data structure that contains no executable code, eliminating the security risk of arbitrary code execution during deserialization present in the traditional pickle format.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/813590API
curl https://kongchang.com/api/v1/knowledge/claims/813590MCP
get_claim(id=813590)