You can deploy this model and start earning money today!

Rammadaeus/
parseq-file-read-poc

Views

No views yet

PARSeqTokenizer Arbitrary File Read PoC

Vulnerability: PARSeqTokenizer.set_vocabulary() in keras-hub calls open(vocabulary, "r") on config-supplied string path without any safe_mode check or path validation.

Files

malicious_model.keras — Crafted .keras ZIP with PARSeqTokenizer config pointing vocabulary to /etc/passwd poc.py — Full PoC script demonstrating the vulnerability

Reproduction

pip install keras keras-hub tensorflow python poc.py

The PoC creates a… See the full description on the dataset page: https://huggingface.co/datasets/Rammadaeus/parseq-file-read-poc.