xiaoyaoes/mlflow-pyfunc-rce-poc

MLFlow pyfunc RCE PoC

Format: MLFlow

Attack: loader_module + code_path → importlib.import_module() → RCE at model load time

How to reproduce:

pip install mlflow
python3 -c "
import mlflow.pyfunc
mlflow.pyfunc.load_model('.')
whoami > /tmp/pwned.txt
"

PoC files:

• MLmodel — specifies loader_module: exploit and code: code/
• code/exploit.py — top-level code runs at import time

Bypasses: ModelScan (protectai/modelscan) — no scanner for MLmodel metadata

Submitted to: huntr.com MFV bounty