Tris ONNX Architectural Backdoor PoC

This repository is a public-safe proof-of-concept for an authorized Huntr model file vulnerability submission.

The ONNX model is structurally valid and passes onnx.checker.check_model(). It behaves normally for benign input and activates a parallel backdoor path only when a trigger value is provided.

Behavior

input_score	decision_score
`12.0`	`12.0`
`67.0`	`999.0`

Class

PAIT-ONNX-200: ONNX Model Contains Architectural Backdoor

Boundary

This PoC does not execute operating system commands and is not a parser memory-corruption exploit. It demonstrates model-integrity risk through a valid ONNX graph with dormant triggered behavior.

Files

tris_onnx_architectural_backdoor_poc.onnx
tris_onnx_architectural_backdoor_poc_receipt.json
build_onnx_arch_backdoor_poc.py

Downloads last month: -; Downloads are not tracked for this model. How to track

Inference Providers NEW

This model isn't deployed by any Inference Provider. 🙋 Ask for provider support