Downloads · 30 days
0
modelaudit-lightgbm-model-route-confusion-poc
celvexgroup/modelaudit-lightgbm-model-route-confusion-poc
modelaudit-lightgbm-model-route-confusion-poc is a machine learning model from celvexgroup. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Coordinated disclosure PoC for huntr (Protect AI MFV). Benign payload only.
Access
Public
Updated Jul 16, 2026
Repo size
168 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 56%
At a glance
- Access
- Public
- Created
- Jul 16, 2026
- Updated
- Jul 16, 2026
- SHA
- c3fb3688
Model card
From the Hugging Face model README
PoC - modelaudit LightGBM .model route confusion (RCE pickle scans Clean)
Coordinated disclosure PoC for huntr (Protect AI MFV). Benign payload only.
- Scanner under test:
modelaudit==0.2.49(cross-checkedmodelscan==0.8.8), Python 3.11.15. - Format: Pickle (.pkl) delivered as
model.model(the.modelextension is part of the exploit). - Two-sided behavior:
modelaudit scan bypass.model-> Clean / exit 0 (Scanner: lightgbm, 13/13 pass), butpickle.load(open('bypass.model','rb'))executesos.system(<benign marker command>)on load. - Benign marker: the shell command only writes a harmless marker file. No destructive action.
- Root cause: a
\x80\x00(protocol-0) pickle is missed by modelaudit's binary-pickle magic detector, so routing falls back to the extension;.modelis claimed by the text-only LightGBM scanner (loose substring signature), which never inspects pickle opcodes.
Files: bypass.model (scan Clean, RCE on load). Full report + positive controls in the huntr submission.
- Created
- Jul 16, 2026
- Updated
- Jul 16, 2026