joblib-dictconfig-modelscan-bypass-poc

Joblib dictConfig ModelScan bypass PoC

Security proof of concept for huntr review. Do not load this file outside a controlled test directory.

dictconfig_bypass.joblib demonstrates a .joblib payload that:

• is reported clean by ModelScan (0 issues across all severities)
• executes a harmless marker-file command during joblib.load()
• hides the process-spawning primitive inside a logging.config.dictConfig handler factory string

The payload writes joblib_dictconfig_marker.txt when loaded.

Verify

PYTHONPATH=/path/to/modelscan python verify_poc.py

Expected result:

ModelScan issues: []
Marker exists after joblib.load(): True