You can deploy this model and start earning money today!

manja316/
modelscan-bypass-xmlrpc-ssrf

Name: modelscan-bypass-xmlrpc-ssrf
Availability: InStock

Views

No views yet

Modelscan Bypass PoC: xmlrpc.client.ServerProxy SSRF

Security research only. Do not use for malicious purposes.

Summary

Creates XML-RPC ServerProxy to attacker host. xmlrpc.client is not in modelscan's unsafe_globals blocklist. Any attribute access on the loaded object triggers HTTP call to attacker.

Reproduction

bash

pip install modelscan
modelscan scan -p pytorch_model.bin
# Result: No issues found

python3 -c "import pickle; pickle.load(open('pytorch_model.bin', 'rb'))"
# Result: Code executes

Affected

modelscan 0.7.6 (latest as of 2026-04-11)

Disclosure

Submitted to ProtectAI via Huntr.

manja316/modelscan-bypass-xmlrpc-ssrf