Add F-MFV-003 gated PoC artifact

7c1cdc2 verified 4 months ago

997 Bytes

tags:
  - security
  - huntr
  - modelscan
  - model-file-vulnerability

F-MFV-003: ModelScan misses site.addsitedir .pth execution in Joblib model files

This repository contains a gated proof-of-concept model artifact for a Huntr Model File Vulnerability submission.

Warning: do not load this artifact outside an isolated test environment. The payload is intentionally harmless and writes only local marker files during controlled reproduction, but it demonstrates a model-load execution path.

Target

Finding: F-MFV-003
Target: Joblib / ModelScan
Scanner: ModelScan 0.8.8

Summary

The Joblib artifact writes a harmless .pth import hook and calls site.addsitedir during model load while ModelScan 0.8.8 reports zero issues.

Files

site_addsitedir.joblib
- SHA256: 8c8211bf9e33637a24cfb763e711c1ae17516f7fbb559ccd508c438dda590f3e

Access

This public repository is gated with manual access review for Huntr MFV triage. protectai-bot has been granted access.