Upload README.md with huggingface_hub
Browse files
README.md
ADDED
|
@@ -0,0 +1,9 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
# PoC - modelaudit HDF5 external-reference detector skipped for non-Keras layouts (BL-0105)
|
| 2 |
+
|
| 3 |
+
Coordinated disclosure PoC for huntr (Protect AI MFV). Benign only.
|
| 4 |
+
|
| 5 |
+
- Scanner: modelaudit==0.2.49 (keras_h5_scanner.py). Format: HDF5 (.h5).
|
| 6 |
+
- `modelaudit scan A_variables_bypass.h5` -> Clean/exit 0, but the file uses HDF5 external storage that, on any h5py read, discloses an attacker-chosen local file (arbitrary file READ). `C_positive_control.h5` is the SAME external-storage primitive under a Keras layout and correctly fires CVE-2026-1669 CRITICAL - proving the detector is live; only the non-Keras layout gate (line 666-667) differs.
|
| 7 |
+
- Benign: external ref points at a harmless marker / /etc/hostname for demonstration. No write, no code exec.
|
| 8 |
+
|
| 9 |
+
Files: A_variables_bypass.h5, D_generic_bypass.h5 (bypass), C_positive_control.h5 (fires). Full report in huntr submission.
|