PT-2024-26375 · Unknown · Torchserve

Namannandan · Published 2024-07-18 · Updated 2024-08-07 · CVE-2024-35198

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TorchServe versions prior to 0.11.0

Description The issue concerns TorchServe's check on allowed urls configuration, which can be bypassed if the URL contains characters such as "..". This allows a model to be downloaded into the model store, and once downloaded, it can be referenced without providing a URL the second time, effectively bypassing the allowed urls security check. Customers using PyTorch inference Deep Learning Containers (DLC) through Amazon SageMaker and EKS are not affected.

Recommendations For versions prior to 0.11.0, upgrade to TorchServe release 0.11.0 to address this issue. As a temporary workaround, consider validating the URL without characters such as ".." before downloading to prevent bypassing the allowed urls security check. However, it is advised to upgrade to the fixed version as there are no known workarounds for this issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

CWE-706

Related Identifiers

CVE-2024-35198

GHSA-WXCX-GG9C-FWP2

Affected Products

Torchserve

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35198.json · Exploit
• https://github.com/pytorch/serve/pull/3082 · Patch
• https://ubuntu.com/security/CVE-2024-35198 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35198 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-35198 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-35198 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-35198 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-wxcx-gg9c-fwp2 · Vendor Advisory
• https://github.com/pytorch/serve/releases/tag/v0.11.0 · Note
• https://github.com/pytorch/serve/security/advisories/GHSA-wxcx-gg9c-fwp2 · Note
• https://github.com/pytorch/serve · Note
• https://github.com/pytorch/serve/commit/cdba0fd449c2fd23dcf37c54c0784035541d5114 · Note
• https://t.me/cvedetector/1186 · Telegram Post
• https://t.me/cvenotify/86692 · Telegram Post