You can deploy this model and start earning money today!

mscgo77/
tf-savedmodel-scanner-bypass-poc

Name: tf-savedmodel-scanner-bypass-poc
Availability: InStock

tf-keras

Views

No views yet

⚠️ WARNING — Security Research PoC

DO NOT load this model in production environments. DO NOT use this model for any purpose other than security research.

What is this?

This repository contains a proof-of-concept TensorFlow SavedModel created for responsible security vulnerability disclosure via huntr.com.

Vulnerability Type

Scanner Bypass / Arbitrary File Write (CWE-73)

TensorFlow SavedModel containing SaveV2 op that bypasses modelscan detection (which only checks ReadFile/WriteFile) and writes files to arbitrary paths during inference.

Important Notes

🔴 This model is intentionally crafted to demonstrate a security vulnerability.
🔴 Running inference on this model WILL WRITE FILES to disk.
🔴 DO NOT load in any production, staging, or shared environment.
This repository will be removed or made private after the vulnerability review process is complete.

Responsible Disclosure

This PoC is part of a responsible disclosure process through huntr.com.

mscgo77/tf-savedmodel-scanner-bypass-poc