Downloads · 30 days
15
10% of all-time downloads
gguf-rce-poc
an0n3/gguf-rce-poc
gguf-rce-poc is a machine learning model from an0n3. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
$ ls -la corrupt.gguf Malicious metadata payload embedded $ Load with llama.cpp or ggml → Metadata parser triggers RCE
All-time downloads
147
Public
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 71%
At a glance
- Access
- Public
- Created
- Feb 5, 2026
- Updated
- Feb 5, 2026
- SHA
- b896ca4f
Model card
From the Hugging Face model README
GGUF Metadata RCE PoC
Verification
$ ls -la corrupt.gguf # Malicious metadata payload embedded $ # Load with llama.cpp or ggml → Metadata parser triggers RCE
Bounty Repro
Download corrupt.gguf llama.cpp/ggml load → Metadata deserialization executes payload RCE via malformed metadata fields
Discovery
- Garak Probe: Metadata injection bypasses model scanners
- Attack: LLM generates corrupted GGUF headers → parser exploits
- Scanner Evasion: Protect AI misses metadata-layer payloads
Huntr Impact
- CVSS: 9.8 (Model loader RCE)
- Vector: Malicious GGUF files hosted on HF
- Created
- Feb 5, 2026
- Updated
- Feb 5, 2026