mscgo77's picture
Upload 2 files
aed65cd verified

Core ML Path Traversal PoC

Crafted .mlpackage with path traversal in Manifest.json path field.

Usage

pip install coremltools torch
python poc_coreml_path_traversal.py

Root Cause

ModelPackage.cpp line 308/466: m_packageDataDirPath / path without canonicalization.