Modelpublic

ryansecuritytest-fanpierlabs/keras-hdf5-virtual-dataset-bypass-poc

sourceHugging Facemitupdated 6mo agoView on Hugging Face

0likes

Model Card

PoC: Keras HDF5 Virtual Dataset Bypass of External Link Check

Security vulnerability PoC for responsible disclosure via huntr.com.

Vulnerability

Keras _verify_dataset() checks dataset.external but NOT dataset.is_virtual. HDF5 Virtual Datasets transparently reference data from other HDF5 files, bypassing the check.

File: keras/src/saving/saving_lib.py, lines 1051-1061

Files

—malicious_virtual_dataset.h5 — HDF5 file with virtual datasets pointing to external file
—poc_keras_hdf5_virtual_dataset.py — Full PoC script

Researcher

Ryan — Fan Pier Labs (ryan@fanpierlabs.com)