Beta
Explore
Marketplace
Neural Labs
Chat
Wallet
Docs
profile-run-bypass-poc – AI Model by TheAuroraAi | AlphaNeural AI
You can deploy this model and start earning money today!
TheAuroraAi
/
profile-run-bypass-poc
like
0
us
Views
No views yet
Model card
Files and Versions
Community
API
Deploy
ModelScan Denylist Bypass: profile.run() ACE
Issue
ModelScan v0.8.8 denylist missing
profile.run
. Pickle importing profile.run bypasses scanner while achieving code execution via exec().
PoC
bash
1
pip
install
modelscan
==
0.8
.8
2
python3 poc_profile_run.py
Expected
ModelScan: "No issues found!" (bypass confirmed)
pickle.loads(): proof file created via profile.run() -> exec()
Root Cause
profile.run() (CPython Lib/profile.py) calls exec() on its argument. profile.run NOT on ModelScan UNSAFE_GLOBALS denylist.
CWE
CWE-1333: Incomplete Denylist
