NeMo `.nemo` allowlist bypass PoC

This repository contains a crafted .nemo artifact used for coordinated vulnerability disclosure.

Loading the .nemo file with vulnerable NeMo versions triggers config-driven instantiation of an allowed callable that reaches attacker-controlled Hugging Face remote code.