F-MFV-007: ModelScan misses cffi backend native-library loading in Joblib model files
This repository contains a gated proof-of-concept model artifact for a Huntr Model File Vulnerability submission.
Warning: do not load this artifact outside an isolated test environment. The payload is intentionally harmless and writes only local marker files during controlled reproduction, but it demonstrates a model-load execution path.
Target
- Finding:
F-MFV-007 - Target: Joblib / ModelScan
- Scanner: ModelScan
0.8.8
Summary
The Joblib artifact embeds a harmless shared library and loads it through cffi during model load while ModelScan 0.8.8 reports zero issues.
Files
cffi_dlopen.joblib- SHA256:
838dd6877c92f92f81684bda6597f191515069356d1566acec3ae3535c45de18
- SHA256:
Access
This public repository is gated with manual access review for Huntr MFV triage. protectai-bot has been granted access.
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support