[fzzzy]

There was a buffer overflow or some other exploit like that in llama.cpp and the gguf format. It has been fixed now, but it's definitely possible. Also weights distributed as python pickles can run arbitrary code.

[bevekspldnw]

Distributing anything as python pickles seems utterly batshit to me.

[fzzzy]

Completely agree.