X-LSB-Attacks still needs code, if you only download safetensors and run for example numpy, it is impossible, it would require you to download some kind of custom loader, which isn't present here and i have said only safetensors, NVFP4 is also 4 bits, it is difficult to poison when it is so low.

CVE-2026-24747 is about .pth and .bin files, i specifically said safetensors.

Might not be best, potentially, however what i said is mostly true if not completely true, i believe it is not right to hide the link from people who want to view it.