Gated security proof-of-concept
This repository is publicly accessible, but you have to accept the conditions to access its files and content.
This repository contains a coordinated-disclosure security proof-of-concept: a crafted HDF5 parameter file demonstrating an unguarded external-storage read in Sony nnabla. It contains no network callbacks. Access is restricted to maintainers and huntr / ProtectAI triage for verification and remediation only.
Log in or Sign Up to review the conditions and access this model content.
nnabla HDF5 external-storage arbitrary file read PoC (gated)
Security research PoC for huntr Model File Formats (hdf5). Demonstrates that
stock nnabla.parameter.load_parameters materializes HDF5 external-storage datasets
without rejecting them (arbitrary local file read into parameter tensors).
Gated files: crafted .h5, regenerator, and local canary layout for triage.
Contact: mrw0r57 (huntr: ssjcorpsec).