Downloads · 30 days
0
joblib-rce-poc
Mom3gool2030/joblib-rce-poc
joblib-rce-poc is a machine learning model from Mom3gool2030. Use it for the machine learning task on the model card, and read the license before you ship it in a product. The card lists the license as mit.
Access
Public
Updated Mar 9, 2026
Repo size
623 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 48%
At a glance
- License
- mit
- Access
- Public
- Created
- Mar 9, 2026
- Updated
- Mar 9, 2026
- SHA
- f4d02c44
Model card
From the Hugging Face model README
Joblib Unrestricted Pickle Deserialization PoC
⚠️ SECURITY RESEARCH ONLY ⚠️
Vulnerability
joblib.load() uses NumpyUnpickler (inherits from pickle.Unpickler)
without overriding find_class(), allowing arbitrary code execution
during deserialization of untrusted .joblib files.
File: joblib/numpy_pickle.py:398
Commit: 5d1653ae4dfc1f4f01850dbe32acc080e15ccb8e
CVSS: 9.8 (Critical)
Proof of Concept
import joblib
# Loading this triggers arbitrary code execution
model = joblib.load("malicious_model.joblib")
# Proof: /tmp/joblib_pwned.txt created
Impact
Any application using joblib.load() on untrusted .joblib files is
vulnerable to Remote Code Execution. This includes ML pipelines loading
serialized models from Hugging Face, shared storage, or user uploads.
Files
malicious_model.joblib- Simple RCE PoCmalicious_numpy_model.joblib- Numpy-wrapped variant
- License
- mit
- Created
- Mar 9, 2026
- Updated
- Mar 9, 2026