Downloads · 30 days
0
modelscan-bypass-joblib-poc
bogdancherniy11/modelscan-bypass-joblib-poc
modelscan-bypass-joblib-poc is a machine learning model from bogdancherniy11. Use it for the machine learning task on the model card, and read the license before you ship it in a product. The card lists the license as mit.
Benign proof-of-concept for a ProtectAI huntr Model-File-Vulnerability submission.
Access
Public
Updated Jul 4, 2026
Repo size
275 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 63%
At a glance
- License
- mit
- Access
- Public
- Created
- Jul 4, 2026
- Updated
- Jul 4, 2026
- SHA
- e6dcdc49
Model card
From the Hugging Face model README
modelscan .joblib bypass — PoC (security research)
Benign proof-of-concept for a ProtectAI huntr Model-File-Vulnerability submission.
poc_model.joblib executes code at joblib.load() time via a cProfile.run gadget, while modelscan (0.8.8, latest) reports "No issues found". The payload is benign: it only writes a marker file /tmp/modelscan_bypass_poc.txt to prove code execution. Do not load untrusted model files.
Repro:
modelscan -p poc_model.joblib # No issues found
python -c "import joblib; joblib.load('poc_model.joblib')" # executes
- License
- mit
- Created
- Jul 4, 2026
- Updated
- Jul 4, 2026