Downloads · 30 days
0
poc-joblib-compression-scanner-bypass
Rammadaeus/poc-joblib-compression-scanner-bypass
poc-joblib-compression-scanner-bypass is a machine learning model from Rammadaeus. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Format: Joblib (.joblib) Target: PickleScan + ModelScan CWE: CWE-502 (Deserialization of Untrusted Data)
Access
Public
Updated Feb 18, 2026
Repo size
76 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 64%
At a glance
- Access
- Public
- Created
- Feb 18, 2026
- Updated
- Feb 18, 2026
- SHA
- f56046f0
Model card
From the Hugging Face model README
PoC: Joblib Compressed Pickle Bypasses ML Security Scanners
Format: Joblib (.joblib) Target: PickleScan + ModelScan CWE: CWE-502 (Deserialization of Untrusted Data)
Vulnerability
Joblib compressed pickles bypass both PickleScan and ModelScan. The scanners use pickletools.genops() which cannot parse compressed data, reporting files as clean. joblib.load() handles decompression and executes the embedded payload.
Reproduction
pip install picklescan modelscan
picklescan -p poc_joblib_bypass.joblib # Reports: Infected files: 0
modelscan scan -p poc_joblib_bypass.joblib # Reports: No issues found!
python3 -c "import joblib; joblib.load('poc_joblib_bypass.joblib')" # Executes payload
Tested: PickleScan 1.0.3, ModelScan 0.8.7
- Created
- Feb 18, 2026
- Updated
- Feb 18, 2026