ShellTorchChecker

ShellTorch Checker Tool This tool checks if a TorchServe instance is vulnerable to CVE-2023-43654 and provides possible ways for mitigation. For more details please see our full report at https://www.oligo.security/blog/shelltorch-torchserve-ssrf-vulnerability-cve-2023-43654 To run the tool,...

PyTorch TorchServe SSRF

TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity...

CVE-2023-43654

CVE-2023-43654 ShellTorch is a chain of 3 Critical Vulnerabilities in PyTorch TorchServe - the default inference server of PyTorch. This is an End-to-End POC for an SSRF vulnerability which leads to Arbitrary Remote Code Execution from the network 1. Run TorchServe 0.8.1 docker run -d --rm -it -p...

Linux Distros Unpatched Vulnerability : CVE-2026-123974

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the model handler and run code as the TorchServe...

DEBIAN-CVE-2026-123974

In all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the model handler and run code as the TorchServe service account leading to local privilege escalation...

CVE-2026-123974

In all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the model handler and run code as the TorchServe service account leading to local privilege escalation...

EUVD-2026-118480

In all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the model handler and run code as the TorchServe service account leading to local privilege escalation...

CVE-2026-123974

All versions of PyTorch's TorchServe are affected by a local privilege escalation vulnerability (CWE-379). The root cause is a predictable extraction directory in /tmp, which allows a local user to swap the model handler . This enables the attacker to execute arbitrary code as the TorchServe serv...

CVE-2026-123974 pytorch/serve: Local privilege escalation through insecure temporary path

In all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the model handler and run code as the TorchServe service account leading to local privilege escalation...

PyTorch TorchServe - Detect

Detected PyTorch TorchServe, a model-serving framework for PyTorch models. The inference API default port 8080 answers GET /ping with "status":"Healthy" and exposes /api-description; the management API default port 8081 lists registered models at GET /models. An exposed management API permits...

eisen (0.1.9), eisen-deploy (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-6577 via torchserve (>=0.0.1b20200409, <=0.7.1)

torchserve PYPI version =0.0.1b20200409, =0.0.1, =0.0.80, =0.1.0 Source cves: CVE-2024-6577 Source advisory: OSV:PYSEC-2026-1973...

wafl-llm (>=0.0.80, <=0.1.0) potentially affected by CVE-2024-35199 via torchserve (0.7.1)

torchserve PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - wafl-llm =0.0.80, =0.1.0 Source cves: CVE-2024-35199 Source advisory: OSV:PYSEC-2026-1971...

PYSEC-2026-1971 TorchServe gRPC Port Exposure

Impact The two gRPC ports 7070 and 7071, are not bound to localhost by default, so when TorchServe is launched, these two interfaces are bound to all interfaces. Customers using PyTorch inference Deep Learning Containers DLC through Amazon SageMaker and EKS are not affected. Patches This issue in...

TorchServe gRPC Port Exposure

ImpactThe two gRPC ports 7070 and 7071, are not bound to localhost by default, so when TorchServe is launched, these two interfaces are bound to all interfaces. Customers using PyTorch inference Deep Learning Containers DLC through Amazon SageMaker and EKS are not affected. PatchesThis issue in...

wafl-llm (>=0.0.80, <=0.1.0) potentially affected by CVE-2023-48299 via torchserve (0.7.1)

torchserve PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - wafl-llm =0.0.80, =0.1.0 Source cves: CVE-2023-48299 Source advisory: OSV:PYSEC-2026-1972...

PYSEC-2026-1972 TorchServe ZipSlip

Impact Using the model/workflow management API, there is a chance of uploading potentially harmful archives that contain files that are extracted to any location on the filesystem that is within the process permissions. Leveraging this issue could aid third-party actors in hiding harmful code in...

TorchServe ZipSlip

ImpactUsing the model/workflow management API, there is a chance of uploading potentially harmful archives that contain files that are extracted to any location on the filesystem that is within the process permissions. Leveraging this issue could aid third-party actors in hiding harmful code in...

wafl-llm (>=0.0.80, <=0.1.0) potentially affected by CVE-2023-43654 via torchserve (0.7.1)

torchserve PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - wafl-llm =0.0.80, =0.1.0 Source cves: CVE-2023-43654 Source advisory: OSV:PYSEC-2026-553...

PYSEC-2026-553 TorchServe Server-Side Request Forgery vulnerability

Impact Remote Server-Side Request Forgery SSRF Issue: TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity of the system and...

TorchServe Server-Side Request Forgery vulnerability

ImpactRemote Server-Side Request Forgery SSRF Issue: TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity of the system and...