modelscan-bypass-pycompile
ProtectAI modelscan Bypass PoC
Module: pycompile persist
Impact: py_compile.compile bypass - bytecode persistence
Scanner: modelscan 0.7.6 (latest on PyPI)
Result: "No issues found" — bypass confirmed
Reproduction
pip install modelscan
modelscan scan -p pycompile_persist.pkl
# Output: "No issues found!"
# But pickle.load() executes the payload
Responsible Disclosure
This PoC is uploaded for responsible disclosure via Huntr MFV program.