ShellTorch Vulnerabilities Expose PyTorch Models to Remote Code Execution

ShellTorch vulnerabilities chain exposes tens of thousands of servers to remote code execution and data exfiltration. Researchers revealed that the TorchServe flaws (including CVE-2023-43654, CVSS: 9.8) can expose sensitive data, compromise AI models, and run a full server takeover. TorchServe is a famous open-source tool for serving and scaling PyTorch models in production. Organizations involved […]

The post ShellTorch Vulnerabilities Expose PyTorch Models to Remote Code Execution appeared first on Heimdal Security Blog.

ai models code code execution compromise cve cvss cybersecurity news data data exfiltration exfiltration expose flaws pytorch remote code remote code execution researchers run scaling sensitive sensitive data server servers shelltorch takeover tool vulnerabilities