Backdoored LLMs - Pickle Deserialization to RCE

Ibrahim Saud@tektrix

•updated Jun 22, 2026•0•0•4

This rule detects a classic malicious model attack chain where a Python process reads a .pkl, .pt, or .bin model file, and immediately spawns an anomalous system shell or execution utility. This indicates potential Remote Code Execution (RCE) via deserialization vulnerabilities in machine learning models.