Upload folder using huggingface_hub

ab3b028 verified 5 months ago

571 Bytes

library_name: pytorch
tags:
  - security-research
  - modelscan-bypass
license: mit

ModelScan Bypass PoC — platform.uname

Security research for responsible disclosure via Huntr MFV program.

Vulnerability

platform.uname is not in modelscan's unsafe_globals blocklist. modelscan reports "No issues found" but loading triggers system information disclosure — returns OS name, hostname, release, version, machine architecture.

Impact: LOW

Reproduction

pip install modelscan
modelscan scan -p bypass_poc.pkl
# Output: "No issues found!"