ModelScan Bypass PoC โ rlcompleter.Completer
Security research for responsible disclosure via Huntr MFV program.
Vulnerability
rlcompleter.Completer is not in modelscan's unsafe_globals blocklist.
modelscan reports "No issues found" but loading triggers creates a completer that calls eval() on user input for tab completion..
Impact: MEDIUM
Reproduction
pip install modelscan
modelscan scan -p bypass_poc.pkl
# Output: "No issues found!"
Inference Providers NEW
This model isn't deployed by any Inference Provider. ๐ Ask for provider support