Downloads · 30 days
0
pickle-bypass-mailcap-findmatch-poc
xiaoyaoes/pickle-bypass-mailcap-findmatch-poc
pickle-bypass-mailcap-findmatch-poc is a machine learning model from xiaoyaoes. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Access
Public
Updated Jun 12, 2026
Repo size
140 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 54%
At a glance
- Access
- Public
- Created
- Jun 12, 2026
- Updated
- Jun 12, 2026
- SHA
- 425f2647
Model card
From the Hugging Face model README
Pickle Scanner Bypass via mailcap.findmatch
Bypasses picklescan and modelscan.
The Vulnerability
Python's deprecated mailcap module (removed in Python 3.13) exposes findmatch() which executes mailcap entry test commands via os.system(). Neither scanner blocks mailcap imports.
How it works
pickle.loads()importsmailcap.findmatch- Calls
findmatch(caps, type, 'view', filename)wherecapscontains a crafted entry with'test': '<shell_command>' findmatch()internally runsos.system(test_command)
Files
malicious.pkl— Minimal pickle payload (140 bytes)poc.py— Python script that generates and demonstrates the payload
- Created
- Jun 12, 2026
- Updated
- Jun 12, 2026