#torchserve — Public Fediverse posts

TorchServe Potentially Exposed to Remote Code Execution

Israeli-based security company Oligo has uncovered multiple vulnerabilities in TorchServe, the tool used to serve PyTorch models, that could allow an attacker to run arbitrary code on vulnerable systems. The vulnerabilities have been promptly fixed in TorchServe version 0.82.

#pytorch #torchserve #cybersecurity #Israel @israel

https://www.infoq.com/news/2023/10/torcheserve-remote-execution/

TorchServe Potentially Exposed to Remote Code Execution

Israeli-based security company Oligo has uncovered multiple vulnerabilities in TorchServe, the tool used to serve PyTorch models, that could allow an attacker to run arbitrary code on vulnerable systems. The vulnerabilities have been promptly fixed in TorchServe version 0.82.

#pytorch #torchserve #cybersecurity #Israel @israel

https://www.infoq.com/news/2023/10/torcheserve-remote-execution/

TorchServe Potentially Exposed to Remote Code Execution

Israeli-based security company Oligo has uncovered multiple vulnerabilities in TorchServe, the tool used to serve PyTorch models, that could allow an attacker to run arbitrary code on vulnerable systems. The vulnerabilities have been promptly fixed in TorchServe version 0.82.

#pytorch #torchserve #cybersecurity #Israel @israel

https://www.infoq.com/news/2023/10/torcheserve-remote-execution/

「 #TorchServe の 3 つの欠陥により、 #PyTorch ユーザーは緊急のアップグレードが必要になる」： The Register

「本番環境でPyTorch #機械学習 モデルを拡張するためのオープンソースツールであるTorchServeにパッチが適用された3つのセキュリティ問題は、サーバー乗っ取りやリモートコード実行（RCE）につながる可能性があるという。

総称して「 #ShellTorch 」と呼ばれる 3 つの CVE によって「数万の公開されたインスタンス」が脆弱になった」

https://www.theregister.com/2023/10/04/shelltorch_vulnerabilities/

#prattohome #TheResister

「 #TorchServe の 3 つの欠陥により、 #PyTorch ユーザーは緊急のアップグレードが必要になる」： The Register

「本番環境でPyTorch #機械学習 モデルを拡張するためのオープンソースツールであるTorchServeにパッチが適用された3つのセキュリティ問題は、サーバー乗っ取りやリモートコード実行（RCE）につながる可能性があるという。

総称して「 #ShellTorch 」と呼ばれる 3 つの CVE によって「数万の公開されたインスタンス」が脆弱になった」

https://www.theregister.com/2023/10/04/shelltorch_vulnerabilities/

#prattohome #TheResister

Researchers have discovered three security vulnerabilities in TorchServe, an open-source tool for scaling PyTorch machine learning models. These vulnerabilities, collectively known as "ShellTorch," could potentially allow for server takeover and remote code execution (RCE). The flaws were found in the management interface API configuration of TorchServe, making it accessible to external requests without authentication. While there is no evidence of exploitation, it's essential to update TorchServe to the latest version (0.8.2) to mitigate these vulnerabilities and apply additional security measures to protect against potential attacks.

#Security #Python #Pytorch #AI #ML #ShellTorch #CVE #Cybersecurity #API #RCE #Infosec #Tech #TechBites #Torchserve

Researchers have discovered three security vulnerabilities in TorchServe, an open-source tool for scaling PyTorch machine learning models. These vulnerabilities, collectively known as "ShellTorch," could potentially allow for server takeover and remote code execution (RCE). The flaws were found in the management interface API configuration of TorchServe, making it accessible to external requests without authentication. While there is no evidence of exploitation, it's essential to update TorchServe to the latest version (0.8.2) to mitigate these vulnerabilities and apply additional security measures to protect against potential attacks.

#Security #Python #Pytorch #AI #ML #ShellTorch #CVE #Cybersecurity #API #RCE #Infosec #Tech #TechBites #Torchserve

Researchers have discovered three security vulnerabilities in TorchServe, an open-source tool for scaling PyTorch machine learning models. These vulnerabilities, collectively known as "ShellTorch," could potentially allow for server takeover and remote code execution (RCE). The flaws were found in the management interface API configuration of TorchServe, making it accessible to external requests without authentication. While there is no evidence of exploitation, it's essential to update TorchServe to the latest version (0.8.2) to mitigate these vulnerabilities and apply additional security measures to protect against potential attacks.

#Security #Python #Pytorch #AI #ML #ShellTorch #CVE #Cybersecurity #API #RCE #Infosec #Tech #TechBites #Torchserve

Researchers have discovered three security vulnerabilities in TorchServe, an open-source tool for scaling PyTorch machine learning models. These vulnerabilities, collectively known as "ShellTorch," could potentially allow for server takeover and remote code execution (RCE). The flaws were found in the management interface API configuration of TorchServe, making it accessible to external requests without authentication. While there is no evidence of exploitation, it's essential to update TorchServe to the latest version (0.8.2) to mitigate these vulnerabilities and apply additional security measures to protect against potential attacks.

#Security #Python #Pytorch #AI #ML #ShellTorch #CVE #Cybersecurity #API #RCE #Infosec #Tech #TechBites #Torchserve

Researchers have discovered three security vulnerabilities in TorchServe, an open-source tool for scaling PyTorch machine learning models. These vulnerabilities, collectively known as "ShellTorch," could potentially allow for server takeover and remote code execution (RCE). The flaws were found in the management interface API configuration of TorchServe, making it accessible to external requests without authentication. While there is no evidence of exploitation, it's essential to update TorchServe to the latest version (0.8.2) to mitigate these vulnerabilities and apply additional security measures to protect against potential attacks.

#Security #Python #Pytorch #AI #ML #ShellTorch #CVE #Cybersecurity #API #RCE #Infosec #Tech #TechBites #Torchserve

Amazon is warning users of a vulnerability affecting TorchServe — a tool used by some of the world’s biggest companies in building artificial intelligence models into their businesses

#TorchServe #ShellTorch #PyTorch #AI

https://therecord.media/pytorch-torchserve-vulnerabilities-amazon-meta-ai

Amazon is warning users of a vulnerability affecting TorchServe — a tool used by some of the world’s biggest companies in building artificial intelligence models into their businesses

#TorchServe #ShellTorch #PyTorch #AI

https://therecord.media/pytorch-torchserve-vulnerabilities-amazon-meta-ai

Amazon is warning users of a vulnerability affecting TorchServe — a tool used by some of the world’s biggest companies in building artificial intelligence models into their businesses

#TorchServe #ShellTorch #PyTorch #AI

https://therecord.media/pytorch-torchserve-vulnerabilities-amazon-meta-ai

AI server and open ports as a cybersecurity vulnerability #ai #cybersecurity #pytorch #torchserve https://www.bleepingcomputer.com/news/security/shelltorch-flaws-expose-ai-servers-to-code-execution-attacks/

AI server and open ports as a cybersecurity vulnerability #ai #cybersecurity #pytorch #torchserve https://www.bleepingcomputer.com/news/security/shelltorch-flaws-expose-ai-servers-to-code-execution-attacks/

AI server and open ports as a cybersecurity vulnerability #ai #cybersecurity #pytorch #torchserve https://www.bleepingcomputer.com/news/security/shelltorch-flaws-expose-ai-servers-to-code-execution-attacks/

AI server and open ports as a cybersecurity vulnerability #ai #cybersecurity #pytorch #torchserve https://www.bleepingcomputer.com/news/security/shelltorch-flaws-expose-ai-servers-to-code-execution-attacks/

AI server and open ports as a cybersecurity vulnerability #ai #cybersecurity #pytorch #torchserve https://www.bleepingcomputer.com/news/security/shelltorch-flaws-expose-ai-servers-to-code-execution-attacks/