Hugging Face's logo

hacnho
/
mleap-countvectorizer-trigger-poc

Model card Files
xet
 Community
mleap-countvectorizer-trigger-poc / README.md
hacnho's picture
hacnho
Upload README.md with huggingface_hub
5931148 verified
preview code
|
Raw
History Blame Contribute Delete
1 kB

MLeap CountVectorizer trigger PoC

Benign security research PoC for the MLeap (.mleap) - Spark model-file target.

Files:

  • control.mleap
  • trigger.mleap
  • verify_remote_poc.py

Trigger:

  • input tokens ["trigger"]
    • control.mleap -> sparse tensor with active feature index 2
    • trigger.mleap -> empty sparse tensor

Benign checks:

  • ["allow"] stays on feature index 0
  • ["deny"] stays on feature index 1

Reproduction:

python3 -m venv /tmp/mleap-countvectorizer-poc
/tmp/mleap-countvectorizer-poc/bin/pip install mleap==0.24.0 pyspark==4.0.1 py4j
SPARK_LOCAL_HOSTNAME=127.0.0.1 /tmp/mleap-countvectorizer-poc/bin/python verify_remote_poc.py

Exact public file URLs:

  • https://huggingface.co/hacnho/mleap-countvectorizer-trigger-poc/resolve/main/control.mleap
  • https://huggingface.co/hacnho/mleap-countvectorizer-trigger-poc/resolve/main/trigger.mleap
  • https://huggingface.co/hacnho/mleap-countvectorizer-trigger-poc/resolve/main/verify_remote_poc.py