modelscan-bypass-timeit-repeat
ProtectAI modelscan Bypass PoC
Module: timeit repeat rce
Impact: timeit.repeat RCE bypass - exec() variant
Scanner: modelscan 0.7.6 (latest on PyPI)
Result: "No issues found" — bypass confirmed
Reproduction
pip install modelscan
modelscan scan -p timeit_repeat_rce.pkl
# Output: "No issues found!"
# But pickle.load() executes the payload
Responsible Disclosure
This PoC is uploaded for responsible disclosure via Huntr MFV program.