Add ultralytics ACE PoC

README.md

@@ -0,0 +1,6 @@
+# Ultralytics (YOLO) ACE PoC
+
+ultralytics.utils.patches.torch_load() explicitly sets weights_only=False,
+bypassing PyTorch 2.6+'s safety mechanism. Every YOLO model load is vulnerable.
+
+torch_safe_load() defaults safe_only=False, routing through the unsafe path.

malicious_yolo.pt

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:27a6baa0d2595f9e6fd52b17a49ad9bff4307a0428ce8480718763d63676efe6
+size 1495