hacnho/mleap-simpleimputer-trigger-poc

MLeap SimpleImputer trigger PoC

Benign security research PoC for the MLeap (.mleap) - Spark model-file target.

Files:

• control.mleap
• trigger.mleap
• verify_remote_poc.py

Trigger:

• input x0 = NaN
  • control.mleap -> y = 1.5
  • trigger.mleap -> y = 9.0

Benign checks:

• input x0 = 1.0 -> y = 1.0 in both bundles
• input x0 = 2.0 -> y = 2.0 in both bundles

Reproduction:

python3 -m venv /tmp/mleap-simpleimputer-poc
/tmp/mleap-simpleimputer-poc/bin/pip install mleap==0.24.0 pyspark==4.0.1 py4j
SPARK_LOCAL_HOSTNAME=127.0.0.1 /tmp/mleap-simpleimputer-poc/bin/python verify_remote_poc.py

Exact public file URLs:

• https://huggingface.co/hacnho/mleap-simpleimputer-trigger-poc/resolve/main/control.mleap
• https://huggingface.co/hacnho/mleap-simpleimputer-trigger-poc/resolve/main/trigger.mleap
• https://huggingface.co/hacnho/mleap-simpleimputer-trigger-poc/resolve/main/verify_remote_poc.py

Tested runtime:

• mleap==0.24.0
• pyspark==4.0.1
• MLeap JVM artifacts:
  • ml.combust.mleap:mleap-runtime_2.13:0.24.0
  • ml.combust.mleap:mleap-spark_2.13:0.24.0