hacnho/mleap-labelencoder-order-trigger-poc

MLeap LabelEncoder order trigger PoC

This repo is a benign security research PoC for Huntr MFV triage.

Files:

• control_model.json
• control_node.json
• trigger_model.json
• trigger_node.json
• verify_remote_poc.py

Tested trigger entrypoint:

• LabelEncoder().deserialize_from_bundle(...).transform(...)

Behavior:

• control bundle uses class order ['a', 'b', 'c']
• malicious bundle uses class order ['a', 'c', 'b']
• trigger label c changes from index 2 to 1
• benign labels a and b stay equal

Reproduction

python3 verify_remote_poc.py --repo hacnho/mleap-labelencoder-order-trigger-poc

Expected output delta

• trigger:
  • x='c'
  • control -> [2]
  • malicious -> [1]

Benign rows that stay equal:

• x='a' -> [0]
• x='b' -> [1]