Downloads · 30 days
0
modelaudit-hdf5-external-ref-gate-poc
celvexgroup/modelaudit-hdf5-external-ref-gate-poc
modelaudit-hdf5-external-ref-gate-poc is a machine learning model from celvexgroup. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Coordinated disclosure PoC for huntr (Protect AI MFV). Benign only.
Access
Public
Updated Jul 18, 2026
Repo size
11.9 KB
Likes
0
Public
Repo makeup
Click a slice to open those files.
.h511.9 KB · 83%
At a glance
- Access
- Public
- Created
- Jul 18, 2026
- Updated
- Jul 18, 2026
- SHA
- 7fda93cf
Model card
From the Hugging Face model README
PoC - modelaudit HDF5 external-reference detector skipped for non-Keras layouts (BL-0105)
Coordinated disclosure PoC for huntr (Protect AI MFV). Benign only.
- Scanner: modelaudit==0.2.49 (keras_h5_scanner.py). Format: HDF5 (.h5).
modelaudit scan A_variables_bypass.h5-> Clean/exit 0, but the file uses HDF5 external storage that, on any h5py read, discloses an attacker-chosen local file (arbitrary file READ).C_positive_control.h5is the SAME external-storage primitive under a Keras layout and correctly fires CVE-2026-1669 CRITICAL - proving the detector is live; only the non-Keras layout gate (line 666-667) differs.- Benign: external ref points at a harmless marker / /etc/hostname for demonstration. No write, no code exec.
Files: A_variables_bypass.h5, D_generic_bypass.h5 (bypass), C_positive_control.h5 (fires). Full report in huntr submission.
- Created
- Jul 18, 2026
- Updated
- Jul 18, 2026