Insecure Serialization Format
不安全序列化格式
Design & Development
Risk Description
When an organization obtains a model file externally and loads it directly without assessing serialization format risk; due to unmitigated control gaps, code embedded in the file executes the moment it is loaded and obtains system privileges, with no anomaly indicated at any point in the process, triggering compliance exposure and operational reputational costs.
Framework Mappings
OWASP Top 10 for LLMLLM03
MITRE ATLASAML.T0010
NIST AI 600-1Information Security
ISO/IEC 42001Annex A.10.3
ISO/IEC 5338設計與開發
Risk Treatment & Implementation Guidance
Migrate to non-code-executing serialization formats, prohibiting direct loading of untrusted legacy-format files; Load external model files in a sandbox with behavior monitoring before production; Verify provenance and hash-match model files