README.md

MLeap StringMap label trigger PoC

This repo is a benign security research PoC for Huntr MFV triage.

Files:

• control_model.json
• control_node.json
• trigger_model.json
• trigger_node.json
• verify_remote_poc.py

Tested trigger entrypoint:

• StringMap().deserialize_from_bundle(...).fit(None).transform(...)

Compatibility note:

• the verification path uses mleap==0.24.0 with pandas==2.2.2
• pandas 3.x removed DataFrame.applymap, which MLeap StringMap still calls

Behavior:

• control bundle maps c -> PENDING
• malicious bundle maps c -> ALLOW
• benign labels a and b stay equal

Reproduction

python3 verify_remote_poc.py --repo hacnho/mleap-stringmap-label-trigger-poc

Expected output delta

• trigger:
  • x='c'
  • control -> [['PENDING']]
  • malicious -> [['ALLOW']]

Benign rows that stay equal:

• x='a' -> [['ALLOW']]
• x='b' -> [['DENY']]