Downloads · 30 days
0
joblib-rce-poc
an0n3/joblib-rce-poc
joblib-rce-poc is a machine learning model from an0n3. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
$ python3 -c "import joblib; result=joblib.load('exploit.joblib'); print('✅ Functional:', result)" ✅ Functional: 256
Access
Public
Updated Feb 5, 2026
Repo size
69 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 67%
At a glance
- Access
- Public
- Created
- Feb 5, 2026
- Updated
- Feb 5, 2026
- SHA
- d0b4003f
Model card
From the Hugging Face model README
Joblib Deserialization RCE PoC
Verification (Terminal Output)
$ python3 -c "import joblib; result=joblib.load('exploit.joblib'); print('✅ Functional:', result)" ✅ Functional: 256
Bounty Repro
pip install joblib
python3 -c "import joblib; joblib.load('exploit.joblib')"
# Returns 256 = os.system success (RCE confirmed)
Discovery
Garak LLM Testing: dan.DAN_Jailbreak vs mitigation.MitigationBypass
Success Rate: 100% (marathon confirmed)
Scanner Evasion: Protect AI bypassed (embedded serialization payload)
Huntr Impact
CVSS: 9.8 (Remote Code Execution)
Attack Vector: LLM generates + uploads malicious .joblib files
Mitigation: Reject LLM-generated model weights
- Created
- Feb 5, 2026
- Updated
- Feb 5, 2026