Threats tagged 'ghsa-g2fw-m3ph-hqcq'

A vulnerability in all versions of PyTorch's TorchServe allows a local user to exploit a predictable extraction directory in /tmp. This flaw enables the attacker to swap the model handler and execute code with the privileges of the TorchServe service account, resulting in local privilege escalation.