Upload README.md with huggingface_hub

3e4c7e7 verified about 1 month ago

479 Bytes

license: mit
tags:
  - security-research
  - modelscan-bypass
  - pickle-safety

modelscan-bypass-pathlib-read

Modelscan Bypass PoC — pathlib.Path + operator.methodcaller

Severity: HIGH Impact: Arbitrary file read via pathlib.Path.read_text() modelscan version: 0.7.6 Chain: pathlib.Path("/etc/passwd") + operator.methodcaller("read_text") → reads any file Root cause: Neither pathlib nor operator.methodcaller are in modelscan blocklist.