modelscan-bypass-pipes-template

Security research: demonstrates modelscan bypass via pipes.Template shell command execution.

Vulnerability

pipes.Template is not in modelscan's unsafe_globals blocklist. Combined with operator.methodcaller (also unblocked), this achieves arbitrary shell command execution that passes modelscan with "No issues found".

Chain

1. pipes.Template() → template object
2. template.append(CMD, "--") → mutates template with shell command
3. template.open("/dev/null", "r") → EXECUTES the command pipeline

Affected

• modelscan 0.7.6 (latest PyPI)
• modelscan GitHub main

Remediation

Add "pipes": "*" to unsafe_globals in settings.py.