Upload folder using huggingface_hub

5841927 verified 5 months ago

560 Bytes

library_name: pytorch
tags:
  - security-research
  - modelscan-bypass
license: mit

ModelScan Bypass PoC — rlcompleter.Completer

Security research for responsible disclosure via Huntr MFV program.

Vulnerability

rlcompleter.Completer is not in modelscan's unsafe_globals blocklist. modelscan reports "No issues found" but loading triggers creates a completer that calls eval() on user input for tab completion..

Impact: MEDIUM

Reproduction

pip install modelscan
modelscan scan -p bypass_poc.pkl
# Output: "No issues found!"