mscgo77/tf-savedmodel-scanner-bypass-poc

⚠️ WARNING — Security Research PoC

DO NOT load this model in production environments. DO NOT use this model for any purpose other than security research.

What is this?

This repository contains a proof-of-concept TensorFlow SavedModel created for responsible security vulnerability disclosure via huntr.com.

Vulnerability Type

Scanner Bypass / Arbitrary File Write (CWE-73)

TensorFlow SavedModel containing SaveV2 op that bypasses modelscan detection (which only checks ReadFile/WriteFile) and writes files to arbitrary paths during inference.

Important Notes

• —🔴 This model is intentionally crafted to demonstrate a security vulnerability.
• —🔴 Running inference on this model WILL WRITE FILES to disk.
• —🔴 DO NOT load in any production, staging, or shared environment.
• —This repository will be removed or made private after the vulnerability review process is complete.

Responsible Disclosure

This PoC is part of a responsible disclosure process through huntr.com.