| # modelscan-bypass-pycompile | |
| ## ProtectAI modelscan Bypass PoC | |
| **Module**: `pycompile persist` | |
| **Impact**: py_compile.compile bypass - bytecode persistence | |
| **Scanner**: modelscan 0.7.6 (latest on PyPI) | |
| **Result**: "No issues found" — bypass confirmed | |
| ### Reproduction | |
| ```bash | |
| pip install modelscan | |
| modelscan scan -p pycompile_persist.pkl | |
| # Output: "No issues found!" | |
| # But pickle.load() executes the payload | |
| ``` | |
| ### Responsible Disclosure | |
| This PoC is uploaded for responsible disclosure via Huntr MFV program. | |