Downloads · 30 days
0
profile-run-bypass-poc
TheAuroraAi/profile-run-bypass-poc
profile-run-bypass-poc is a machine learning model from TheAuroraAi. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
ModelScan v0.8.8 denylist missing profile.run. Pickle importing profile.run bypasses scanner while achieving code execution via exec().
Access
Public
Updated Apr 7, 2026
Repo size
192 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
.py5.1 KB · 68%
At a glance
- Access
- Public
- Created
- Apr 5, 2026
- Updated
- Apr 7, 2026
- SHA
- d6f05f03
Model card
From the Hugging Face model README
ModelScan Denylist Bypass: profile.run() ACE
Issue
ModelScan v0.8.8 denylist missing profile.run.
Pickle importing profile.run bypasses scanner while achieving code execution via exec().
PoC
pip install modelscan==0.8.8
python3 poc_profile_run.py
Expected
- ModelScan: "No issues found!" (bypass confirmed)
- pickle.loads(): proof file created via profile.run() -> exec()
Root Cause
profile.run() (CPython Lib/profile.py) calls exec() on its argument. profile.run NOT on ModelScan UNSAFE_GLOBALS denylist.
CWE
CWE-1333: Incomplete Denylist
- Created
- Apr 5, 2026
- Updated
- Apr 7, 2026