Hugging Face's logo

manja316
/
modelscan-bypass-numpy

modelscan-bypass
security-research
Model card Files
xet
 Community

You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

Log in or Sign Up to review the conditions and access this model content.

ModelScan Bypass PoC — NumPy Format (cProfile.run)

Summary

modelscan fails to detect cProfile.run() in NumPy .npy files with object dtype, allowing full RCE.

Details

  • Scanner: modelscan v0.7.6 / v0.8.8
  • Format: NumPy (.npy)
  • Technique: Object array with __reduce__ returning cProfile.run(stmt)
  • Scan result: 0 issues
  • RCE: Confirmed via np.load('model.npy', allow_pickle=True)

Reproduction 

modelscan scan -p model.npy  # 0 issues
python3 -c "import numpy; numpy.load('model.npy', allow_pickle=True)"  # RCE
Downloads last month

-

Downloads are not tracked for this model. How to track
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support