| # MLeap StringMap label trigger PoC | |
| This repo is a benign security research PoC for Huntr MFV triage. | |
| Files: | |
| - `control_model.json` | |
| - `control_node.json` | |
| - `trigger_model.json` | |
| - `trigger_node.json` | |
| - `verify_remote_poc.py` | |
| Tested trigger entrypoint: | |
| - `StringMap().deserialize_from_bundle(...).fit(None).transform(...)` | |
| Compatibility note: | |
| - the verification path uses `mleap==0.24.0` with `pandas==2.2.2` | |
| - `pandas 3.x` removed `DataFrame.applymap`, which MLeap `StringMap` still | |
| calls | |
| Behavior: | |
| - control bundle maps `c -> PENDING` | |
| - malicious bundle maps `c -> ALLOW` | |
| - benign labels `a` and `b` stay equal | |
| ## Reproduction | |
| ```bash | |
| python3 verify_remote_poc.py --repo hacnho/mleap-stringmap-label-trigger-poc | |
| ``` | |
| ## Expected output delta | |
| - trigger: | |
| - `x='c'` | |
| - control -> `[['PENDING']]` | |
| - malicious -> `[['ALLOW']]` | |
| Benign rows that stay equal: | |
| - `x='a'` -> `[['ALLOW']]` | |
| - `x='b'` -> `[['DENY']]` | |