You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

Log in or Sign Up to review the conditions and access this model content.

YAML Metadata Warning:empty or missing yaml metadata in repo card

Check out the documentation for more information.

Security PoC โ€” mljar-supervised CWE-502 joblib RCE (huntr MFV, responsible disclosure)

Benign proof-of-concept saved AutoML results folder for a responsible-disclosure report to huntr.com. Loading + predicting with this folder executes attacker code via joblib.load of the learner artifact 1_DecisionTree/learner_fold_0.decision_tree (supervised/algorithms/sklearn.py:53).

Reproduce:

import numpy as np; from supervised import AutoML
AutoML(results_path="<this dir>").predict(np.random.rand(5,4))  # -> joblib.load -> os.system -> RCE

Payload is harmless: writes /tmp/MLJAR_RCE_POC.txt only. Gated for protectai-bot review.

Downloads last month
-
Inference Providers NEW
This model isn't deployed by any Inference Provider. ๐Ÿ™‹ Ask for provider support