Upload README.md with huggingface_hub

README.md

@@ -0,0 +1,30 @@
+---
+tags:
+- security-research
+- modelscan-bypass
+---
+
+# modelscan-bypass-pipes-template
+
+Security research: demonstrates modelscan bypass via pipes.Template shell command execution.
+
+## Vulnerability
+
+pipes.Template is not in modelscan's unsafe_globals blocklist. 
+Combined with operator.methodcaller (also unblocked), this achieves 
+arbitrary shell command execution that passes modelscan with "No issues found".
+
+## Chain
+
+1. pipes.Template() → template object
+2. template.append(CMD, "--") → mutates template with shell command
+3. template.open("/dev/null", "r") → EXECUTES the command pipeline
+
+## Affected
+
+- modelscan 0.7.6 (latest PyPI)
+- modelscan GitHub main
+
+## Remediation
+
+Add "pipes": "*" to unsafe_globals in settings.py.