YAML Metadata Warning:empty or missing yaml metadata in repo card
Check out the documentation for more information.
MLflow Sklearn Model - Scanner Bypass RCE PoC
Security research proof-of-concept. For responsible disclosure purposes only.
Contents
model/MLmodel- MLflow model metadatamodel/model.pkl- Malicious pickle payload (scanner bypass)create_poc.py- Script to recreate the payload
Reproduce
import mlflow.sklearn
model = mlflow.sklearn.load_model("model/")
# Triggers RCE on load
Scanner Result
$ modelscan -p model/model.pkl
No issues found!
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support