---
title: "Discussion on \"Pickle Deserialization RCE via Model Upload Endpoint\" | Hashnode"
description: "Discussion on \"Pickle Deserialization RCE via Model Upload Endpoint\". Link: https://www.ratctf.com/challenges/synapse-lab\nThis challenge revolves around a classic but still heavily abused primitive: unsafe Python pickle deserialization exposed through a model upload API"
url: "https://hashnode.com/posts/pickle-deserialization-rce-via-model-upload-endpoint/6a2a12a4d8b5cbebdad29055"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Pickle Deserialization RCE via Model Upload Endpoint](https://noob6t5.hashnode.dev/pickle-deserialization-rce-via-model-upload-endpoint?utm_source=hashnode&utm_medium=feed)

Link: https://www.ratctf.com/challenges/synapse-lab This challenge revolves around a classic but still heavily abused primitive: unsafe Python pickle deserialization exposed through a model upload API

Jun 11 · 4 min read · noob6t5.hashnode.dev  
Read the article

-   [#web-20](https://hashnode.com/tag/web-20)
-   [#noob6t5](https://hashnode.com/tag/noob6t5)
-   [#ai-vuln](https://hashnode.com/tag/ai-vuln)
-   [#model](https://hashnode.com/tag/model)

## Written by

[Sangharsha](https://hashnode.com/@noob6t5)

@noob6t5

  
[View profile](https://hashnode.com/@noob6t5)

Dev & Tester

I write to revisit topics I’m interested in or when I’m bored and curious.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.