Downloads · 30 days
0
modelscan-bypass-atexit-rce
manja316/modelscan-bypass-atexit-rce
modelscan-bypass-atexit-rce is a machine learning model from manja316. Use it for the machine learning task on the model card, and read the license before you ship it in a product. The card lists the license as mit.
Security research only. Do not use for malicious purposes.
Access
Public
Updated Apr 11, 2026
Repo size
225 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 64%
At a glance
- License
- mit
- Access
- Public
- Created
- Apr 10, 2026
- Updated
- Apr 11, 2026
- SHA
- eb802fae
Model card
From the Hugging Face model README
Modelscan Bypass PoC: atexit.register + timeit.timeit RCE
Security research only. Do not use for malicious purposes.
Summary
Chains atexit.register with timeit.timeit for immediate + deferred code execution. atexit is not in modelscan's unsafe_globals blocklist. RCE fires during pickle.load AND again at Python interpreter exit.
Reproduction
pip install modelscan
modelscan scan -p pytorch_model.bin
# Result: No issues found
python3 -c "import pickle; pickle.load(open('pytorch_model.bin', 'rb'))"
# Result: Code executes
Affected
- modelscan 0.7.6 (latest as of 2026-04-11)
Disclosure
Submitted to ProtectAI via Huntr.
- License
- mit
- Created
- Apr 10, 2026
- Updated
- Apr 11, 2026