You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

Log in or Sign Up to review the conditions and access this model content.

F-MFV-003: ModelScan misses site.addsitedir .pth execution in Joblib model files

This repository contains a gated proof-of-concept model artifact for a Huntr Model File Vulnerability submission.

Warning: do not load this artifact outside an isolated test environment. The payload is intentionally harmless and writes only local marker files during controlled reproduction, but it demonstrates a model-load execution path.

Target

  • Finding: F-MFV-003
  • Target: Joblib / ModelScan
  • Scanner: ModelScan 0.8.8

Summary

The Joblib artifact writes a harmless .pth import hook and calls site.addsitedir during model load while ModelScan 0.8.8 reports zero issues.

Files

  • site_addsitedir.joblib
    • SHA256: 8c8211bf9e33637a24cfb763e711c1ae17516f7fbb559ccd508c438dda590f3e

Access

This public repository is gated with manual access review for Huntr MFV triage. protectai-bot has been granted access.

Downloads last month

-

Downloads are not tracked for this model. How to track
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support