Database/AI/ML frameworks & serving
TorchServe: `allowed_urls` bypass
CVSS 9.8CVE-2024-35198AI/ML frameworks & servingcurated
Impact
allowed_urls bypass → arbitrary model load → RCE
Who can reach it
Unauthenticated network to the management API
What to do
Patch; the earlier ShellTorch fix is insufficient. Treat the management API as never tenant-reachable
References
Related entries
- TorchServe: Unauthenticated SSRFCVE-2023-43654 · TorchServeCritical
- Keras / TensorFlow: Arbitrary code injection in Keras < 2.13 via Lambda-layer model loadingCVE-2024-3660 · Keras / TensorFlowCritical
- Gradio: Code injection via `gradio/component_meta.py`CVE-2024-39236 · GradioCritical
- langchain-experimental: Arbitrary code execution in 0.1.17–0.3.0CVE-2024-46946 · langchain-experimentalCritical
- Gradio: SSRF from the file-upload/proxy pathCVE-2024-47167 · GradioCritical
- PyTorch (`torch.distributed` RemoteModule / RPC): Deserialization RCE across the distributed RPC channelCVE-2024-48063 · PyTorch (`torch.distributed` RemoteModule / RPC)Critical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.