Cover Image

An Empirical Study on Remote Code Execution in Machine Learning Model Hosting Ecosystems

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Siddiq, Mohammed Latif, Romel, Tanzim Hossain, Sekerak, Natalie, Casey, Beatrice, Santos, Joanna C. S.
Format:	Preprint
Published:	2026
Subjects:	Software Engineering Cryptography and Security
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Security in the Age of AI Teammates: An Empirical Study of Agentic Pull Requests on GitHub
by: Siddiq, Mohammed Latif, et al.
Published: (2026)

Assessing the Software Security Comprehension of Large Language Models
by: Siddiq, Mohammed Latif, et al.
Published: (2025)

A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models
by: Casey, Beatrice, et al.
Published: (2024)

FRANC: A Lightweight Framework for High-Quality Code Generation
by: Siddiq, Mohammed Latif, et al.
Published: (2023)

A Patient-Centric Blockchain Framework for Secure Electronic Health Record Management: Decoupling Data Storage from Access Control
by: Romel, Tanzim Hossain, et al.
Published: (2025)

Large Language Models for Software Engineering: A Reproducibility Crisis
by: Siddiq, Mohammed Latif, et al.
Published: (2025)

Exploring Security Practices in Infrastructure as Code: An Empirical Study
by: Verdet, Alexandre, et al.
Published: (2023)

An Empirical Study on the Effectiveness of Large Language Models for Binary Code Understanding
by: Shang, Xiuwei, et al.
Published: (2025)

Security Incentivization: An Empirical Study of how Micropayments Impact Code Security
by: Rass, Stefan, et al.
Published: (2026)

Security Weaknesses of Copilot-Generated Code in GitHub Projects: An Empirical Study
by: Fu, Yujia, et al.
Published: (2023)

WildCode: An Empirical Analysis of Code Generated by ChatGPT
by: Khanmohammadi, Kobra, et al.
Published: (2025)

Large Language Models for Secure Code Assessment: A Multi-Language Empirical Study
by: Dozono, Kohei, et al.
Published: (2024)

Developers Are Victims Too : A Comprehensive Analysis of The VS Code Extension Ecosystem
by: Edirimannage, Shehan, et al.
Published: (2024)

DySec: A Machine Learning-based Dynamic Analysis for Detecting Malicious Packages in PyPI Ecosystem
by: Mehedi, Sk Tanzir, et al.
Published: (2025)

An Empirical Security Evaluation of LLM-Generated Cryptographic Rust Code
by: Elsayed, Mohamed, et al.
Published: (2026)

An Empirical Study on the Security Vulnerabilities of GPTs
by: Wu, Tong, et al.
Published: (2025)

An Empirical Study of Vulnerability Handling Times in CPython
by: Ruohonen, Jukka
Published: (2024)

An Empirical Study of Vulnerable Package Dependencies in LLM Repositories
by: Liu, Shuhan, et al.
Published: (2025)

CODEFUSE-DEBENCH: An Empirical Study on Readability, Recompilability, and Functionality
by: Liu, Puzhuo, et al.
Published: (2026)

An Empirical Study of Code Obfuscation Practices in the Google Play Store
by: Niroshan, Akila, et al.
Published: (2025)

Characterizing Trust Boundary Vulnerabilities in TEE Containers: An Empirical Study
by: Liu, Weijie, et al.
Published: (2025)

Exploring User Privacy Awareness on GitHub: An Empirical Study
by: Alfieri, Costanza, et al.
Published: (2024)

Enhancing Automata Learning with Statistical Machine Learning: A Network Security Case Study
by: Ayoughi, Negin, et al.
Published: (2024)

Unveiling Security Weaknesses in Autonomous Driving Systems: An In-Depth Empirical Study
by: Cheng, Wenyuan, et al.
Published: (2025)

Conflicting Scores, Confusing Signals: An Empirical Study of Vulnerability Scoring Systems
by: Koscinski, Viktoria, et al.
Published: (2025)

An Empirical Study on Oculus Virtual Reality Applications: Security and Privacy Perspectives
by: Guo, Hanyang, et al.
Published: (2024)

An Empirical Study on the Distance Metric in Guiding Directed Grey-box Fuzzing
by: Wen, Tingke, et al.
Published: (2024)

Sandboxing Adoption in Open Source Ecosystems
by: Alhindi, Maysara, et al.
Published: (2024)

ColorGo: Directed Concolic Execution
by: Li, Jia, et al.
Published: (2025)

Evaluating Tool Cloning in Agentic-AI Ecosystems
by: Kim, Taein, et al.
Published: (2026)

Cross-Ecosystem Vulnerability Analysis for Python Applications
by: Alexopoulos, Georgios, et al.
Published: (2026)

A Large-scale Empirical Study on the Generalizability of Disclosed Java Library Vulnerability Exploits
by: Chen, Zirui, et al.
Published: (2026)

Empirical Study of Code Large Language Models for Binary Security Patch Detection
by: Li, Qingyuan, et al.
Published: (2025)

SBOM Generation Tools in the Python Ecosystem: an In-Detail Analysis
by: Cofano, Serena, et al.
Published: (2024)

An Investigation of Patch Porting Practices of the Linux Kernel Ecosystem
by: Li, Xingyu, et al.
Published: (2024)

Compliance as Code: A Study of Linux Distributions and Beyond
by: Ruohonen, Jukka, et al.
Published: (2026)

Do Privacy Policies Match with the Logs? An Empirical Study of Privacy Disclosure in Android Application Logs
by: Chen, Zhiyuan, et al.
Published: (2026)

Code-Centric Detection of Vulnerability-Fixing Commits: A Unified Benchmark and Empirical Study
by: Loose, Nils, et al.
Published: (2026)

Leveraging Security Observability to Strengthen Security of Digital Ecosystem Architecture
by: Ramachandran, Renjith
Published: (2024)

Tracing Vulnerability Propagation Across Open Source Software Ecosystems
by: Ruohonen, Jukka, et al.
Published: (2025)