CVE-2023-48299— TorchServe ZipSlip
Quick assessment
Affected
pytorch serve
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PyTorch是PyTorch开源的一个 Python 包。 PyTorch Serve 0.1.0至0.9.0之前版本存在安全漏洞，该漏洞源于model/workflow management API存在安全漏洞。攻击者可利用该漏洞上传有害存档。
Possible ATT&CK Techniques 2 AI
T1027 · Obfuscated Files or Information T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-48299
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
TorchServe ZipSlip
Source: CVE Program / CVE List V5
Vulnerability Description
TorchServe is a tool for serving and scaling PyTorch models in production. Starting in version 0.1.0 and prior to version 0.9.0, using the model/workflow management API, there is a chance of uploading potentially harmful archives that contain files that are extracted to any location on the filesystem that is within the process permissions. Leveraging this issue could aid third-party actors in hiding harmful code in open-source/public models, which can be downloaded from the internet, and take advantage of machines running Torchserve. The ZipSlip issue in TorchServe has been fixed by validating the paths of files contained within a zip archive before extracting them. TorchServe release 0.9.0 includes fixes to address the ZipSlip vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Vulnerability Title
PyTorch 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PyTorch是PyTorch开源的一个 Python 包。 PyTorch Serve 0.1.0至0.9.0之前版本存在安全漏洞，该漏洞源于model/workflow management API存在安全漏洞。攻击者可利用该漏洞上传有害存档。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2023-48299
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-48299
请登录查看更多情报信息。
Patches & Fixes for CVE-2023-48299 (2)
-
https://github.com/pytorch/serve/pull/2634 x_refsource_MISC
Vendor Advisories for CVE-2023-48299 (1)
-
https://github.com/pytorch/serve/security/advisories/GHSA-m2mj-pr4f-h9jp x_refsource_CONFIRM
Other References for CVE-2023-48299 (1)
-
https://github.com/pytorch/serve/releases/tag/v0.9.0 x_refsource_MISC
IV. Related Vulnerabilities
Same vendor: pytorch
-
CVE-2026-65918
PyTorch torchvision GIF Decoder Out-of-bounds Heap Read -
CVE-2026-24747
PyTorch Vulnerable to Remote Code Execution via Untrusted Ch -
CVE-2025-32434
PyTorch: `torch.load` with `weights_only=True` leads to remo -
CVE-2024-6577
Unclaimed S3 Bucket Usage in pytorch/serve -
CVE-2024-35198
TorchServe bypass allowed_urls configuration
Same weakness: CWE-22
-
CVE-2026-63120
PGHoard: Incomplete Path Traversal fix in restore.py allows -
CVE-2026-57113
PraisonAI GitHub template cache path traversal allows outsid -
CVE-2026-56834
PraisonAI dynamic-context artifact tools read arbitrary host -
CVE-2026-56833
PraisonAI Dynamic Context history and terminal tools read fi -
CVE-2026-115497
Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read v
V. Comments for CVE-2023-48299
No comments yet