Downloads · 30 days
13
19% of all-time downloads
keras-compile-config-lambda-rce
xiaoyaoes/keras-compile-config-lambda-rce
keras-compile-config-lambda-rce is a machine learning model from xiaoyaoes. Use it for the machine learning task on the model card, and read the license before you ship it in a product. It is set up for keras. The card lists the license as mit.
ModelScan bypass via compileconfig.loss.lambda
All-time downloads
67
Public
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 33%
At a glance
- Library
- keras
- License
- mit
- Access
- Public
- Created
- Jul 4, 2026
- Updated
- Jul 9, 2026
- SHA
- 8dbc1a46
Model card
From the Hugging Face model README
Keras compile_config Lambda RCE PoC
ModelScan bypass via compile_config.loss.lambda
Vulnerability
Keras v3 models can specify a loss function of type __lambda__. When loaded with safe_mode=False, Keras eval()'s the lambda source string, allowing arbitrary code execution.
ModelScan checks for class_name: "Lambda" (capital L, referring to the Keras Lambda layer) but does not scan class_name: "__lambda__" (referring to the loss function type). This creates a complete bypass.
Usage
pip install keras tensorflow
python3 exploit.py
Files
evil_model.keras— Malicious model with lambda loss containing RCE payloadexploit.py— Loader script
Impact
CVSS 9.8. Supply chain attack via HuggingFace/any model repository.
- Library
- keras
- License
- mit
- Created
- Jul 4, 2026
- Updated
- Jul 9, 2026