HTB - SmartHire

Mon, 18 May 2026 00:37:12 +0300

SmartHire HTB Write-up Link to heading

SmartHire was compromised in two stages:

Initial access / user shell The SmartHire web application relied on an external MLflow instance to load a model by name during resume prediction. Because the MLflow registry was exposed and protected only by weak credentials (admin:password), it was possible to register a malicious pyfunc model under the exact name expected by the application. When the application later loaded that model during a prediction request, it deserialized attacker-controlled pickle content and executed a reverse shell as svcweb.