Downloads · 30 days
0
modelscan-compression-bypass-poc
neimasilk/modelscan-compression-bypass-poc
modelscan-compression-bypass-poc is a machine learning model from neimasilk. Use it for the machine learning task on the model card, and read the license before you ship it in a product. The card lists the license as mit.
Security research PoC for responsible disclosure via huntr.com.
Access
Public
Updated Apr 2, 2026
Repo size
222 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 58%
At a glance
- License
- mit
- Access
- Public
- Created
- Apr 2, 2026
- Updated
- Apr 2, 2026
- SHA
- ca19808d
Model card
From the Hugging Face model README
ModelScan Compression Bypass PoC
Security research PoC for responsible disclosure via huntr.com.
Files
- detected_uncompressed.joblib: os.system payload WITHOUT compression. ModelScan DETECTS this (1 CRITICAL).
- bypass_zlib.joblib: SAME os.system payload WITH zlib compression. ModelScan reports 0 issues.
- bypass_lz4.joblib: SAME os.system payload WITH lz4 compression. ModelScan reports 0 issues.
Vulnerability
ModelScan v0.8.8 cannot parse compressed joblib files. When joblib.dump() uses compress=3 (zlib) or compress=("lz4", 3), the pickle bytes are compressed. ModelScan's pickletools.genops() cannot parse compressed bytes, so it silently returns no findings.
However, joblib.load() automatically decompresses and unpickles, executing the malicious payload.
Reproduction
- License
- mit
- Created
- Apr 2, 2026
- Updated
- Apr 2, 2026