---
tags:
- security
- huntr
- modelscan
- model-file-vulnerability
---

# F-MFV-007: ModelScan misses cffi backend native-library loading in Joblib model files

This repository contains a gated proof-of-concept model artifact for a Huntr Model File Vulnerability submission.

Warning: do not load this artifact outside an isolated test environment. The payload is intentionally harmless and writes only local marker files during controlled reproduction, but it demonstrates a model-load execution path.

## Target

- Finding: `F-MFV-007`
- Target: Joblib / ModelScan
- Scanner: ModelScan `0.8.8`

## Summary

The Joblib artifact embeds a harmless shared library and loads it through cffi during model load while ModelScan 0.8.8 reports zero issues.

## Files

- `cffi_dlopen.joblib`
  - SHA256: `838dd6877c92f92f81684bda6597f191515069356d1566acec3ae3535c45de18`

## Access

This public repository is gated with manual access review for Huntr MFV triage. `protectai-bot` has been granted access.