Downloads · 30 days
0
modelscan-compression-bypass-poc
hoanghai2110/modelscan-compression-bypass-poc
modelscan-compression-bypass-poc is a machine learning model from hoanghai2110. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Vulnerability type: Scanner bypass + Arbitrary Code Execution Affected library: protectai/model-scan ≤ 0.8.8 File format: .joblib with compress='gzip'|'zlib'|'bz2'|'lzma' Severity: Critical
Access
Public
Updated Jun 28, 2026
Repo size
452 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
.py2.6 KB · 49%
At a glance
- Access
- Public
- Created
- Jun 28, 2026
- Updated
- Jun 28, 2026
- SHA
- 864b050f
Model card
From the Hugging Face model README
ModelScan Compression Blind-Spot — Compressed .joblib bypasses pickle scanner → ACE
Vulnerability type: Scanner bypass + Arbitrary Code Execution
Affected library: protectai/model-scan ≤ 0.8.8
File format:.joblibwithcompress='gzip'|'zlib'|'bz2'|'lzma'
Severity: Critical
Quick Start
pip install joblib modelscan numpy
python3 reproduce.py
Result
[gzip] issues=0 → ✓ BYPASS + RCE
[zlib] issues=0 → ✓ BYPASS + RCE
[bz2] issues=0 → ✓ BYPASS + RCE
[lzma] issues=0 → ✓ BYPASS + RCE
[ref] issues=1 → ✓ correctly flagged (uncompressed baseline)
- Created
- Jun 28, 2026
- Updated
- Jun 28, 2026