Downloads · 30 days
0
modelscan-bypass-pipes-template
manja316/modelscan-bypass-pipes-template
modelscan-bypass-pipes-template is a machine learning model from manja316. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Security research: demonstrates modelscan bypass via pipes.Template shell command execution.
Access
Public
Updated Apr 11, 2026
Repo size
621 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 59%
At a glance
- Access
- Public
- Created
- Apr 9, 2026
- Updated
- Apr 11, 2026
- SHA
- a54e371c
Model card
From the Hugging Face model README
modelscan-bypass-pipes-template
Security research: demonstrates modelscan bypass via pipes.Template shell command execution.
Vulnerability
pipes.Template is not in modelscan's unsafe_globals blocklist. Combined with operator.methodcaller (also unblocked), this achieves arbitrary shell command execution that passes modelscan with "No issues found".
Chain
- pipes.Template() → template object
- template.append(CMD, "--") → mutates template with shell command
- template.open("/dev/null", "r") → EXECUTES the command pipeline
Affected
- modelscan 0.7.6 (latest PyPI)
- modelscan GitHub main
Remediation
Add "pipes": "*" to unsafe_globals in settings.py.
- Created
- Apr 9, 2026
- Updated
- Apr 11, 2026