Hugging Face's logo

willardj
/
coreml-path-traversal-poc

Model card Files
xet
 Community
coreml-path-traversal-poc / README.md
willardj's picture
willardj
Upload README.md with huggingface_hub
bbb17dc verified
preview code
|
raw
history blame contribute delete
535 Bytes

Core ML Path Traversal via BlobFileValue.fileName (Windows)

Vulnerability

_load_file_value() in coremltools/converters/mil/frontend/milproto/load.py sanitizes fileName with split("/")[-1], which only strips forward slashes. On Windows, backslash directory traversal passes through completely.

A crafted .mlpackage with fileName = "..\\..\\..\\sensitive_file" reads arbitrary files when loaded on Windows.

Affected

coremltools all versions. File: coremltools/converters/mil/frontend/milproto/load.py, line 113.