Downloads · 30 days
18
35% of all-time downloads
modelaudit-nemo-checkpoint-ext-gate-poc
celvexgroup/modelaudit-nemo-checkpoint-ext-gate-poc
modelaudit-nemo-checkpoint-ext-gate-poc is a machine learning model from celvexgroup. Use it for the machine learning task on the model card, and read the license before you ship it in a product. It is set up for nemo.
Coordinated disclosure PoC for huntr (Protect AI MFV). Benign only.
All-time downloads
52
Public
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
.nemo41 KB · 95%
At a glance
- Library
- nemo
- Access
- Public
- Created
- Jul 18, 2026
- Updated
- Jul 18, 2026
- SHA
- 280208c5
Model card
From the Hugging Face model README
PoC - modelaudit NeMo checkpoint extension-coverage gap (BL-0106)
Coordinated disclosure PoC for huntr (Protect AI MFV). Benign only.
- Scanner: modelaudit==0.2.49 (nemo_scanner.py). Format: NeMo (.nemo, a tar bundle).
modelaudit scan bypass_bin.nemo-> Clean/exit 0: an unsafe pickle stored asmodel_weights.bin(or .dill/.joblib) inside the .nemo is NOT scanned, because nemo_scanner only opcode-scans members ending in {.ckpt,.pt,.pth,.pkl,.pickle} (line 1163).control_ckpt.nemois the identical payload named .ckpt -> CRITICAL (CVE-2025-23249). Renaming bypass_bin.nemo -> .tar also flips it to CRITICAL (isolates the .nemo gate).- Benign: the embedded pickle only touches a marker file on load. No destructive action.
Files: bypass_bin/dill/joblib.nemo (bypass), control_ckpt.nemo (fires). Full report in huntr submission.
- Library
- nemo
- Created
- Jul 18, 2026
- Updated
- Jul 18, 2026