{"data":{"id":"a0c10b41-98e4-4766-a505-a427b167628f","title":"CVE-2023-48299: TorchServe is a tool for serving and scaling PyTorch models in production. Starting in version 0.1.0 and prior to…","summary":"TorchServe versions from 0.1.0 up to but not including 0.9.0 are affected by CVE-2023-48299. Through the model/workflow management API, an attacker can upload archives that extract files to any location the process can write to. This could let third parties hide harmful code in public models and compromise machines running TorchServe.","solution":"The ZipSlip issue has been fixed by validating the paths of files in a zip archive before extraction. TorchServe release 0.9.0 includes the fix.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-48299","publishedAt":"2023-11-22T02:15:09.077Z","cveId":"CVE-2023-48299","cweIds":["CWE-22"],"cvssScore":"5.3","cvssSeverity":"medium","severity":"medium","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["torchserve@>= 0.1.0, < 0.9.0 (fixed: 0.9.0)"],"affectedPackageNames":["torchserve"],"affectedPackageRefs":["pypi:torchserve"],"affectedVendors":[],"affectedVendorsRaw":["TorchServe","PyTorch"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"TorchServe archive extraction path traversal via model management API","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00679,"epssCheckedAt":"2026-11-04T12:08:34.749Z","kevDateAdded":null,"advisoryAliases":["GHSA-m2mj-pr4f-h9jp"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:56:39.149Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2023-10-12T22:01:55.945Z","daysToFix":-41,"fixCheckedAt":"2026-10-29T21:46:37.542Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[{"ecosystem":"pypi","name":"torchserve","fixedVersion":"0.9.0","matchedVersion":"0.9.0","fixReleasedAt":"2023-10-12T22:01:55.945Z","daysToFix":-41,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:46:37.121Z"}]}}