Database/AI/ML frameworks & serving
TorchServe (gRPC 7070/7071): gRPC ports bound to all interfaces regardless of config
CVE-2024-35199AI/ML frameworks & servingcurated
Impact
gRPC ports bound to all interfaces regardless of config
Who can reach it
Unauthenticated network from a co-tenant or the internet
What to do
Patch and enforce bind-address at the pod/network policy layer, not in app config
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.