野村：“蓝色浪潮”冲击美国数据中心，中国AI反而受益
野村：“蓝色浪潮”冲击美国数据中心，中国AI反而受益TorchServe：模型解包目录可预测导致本地提权风险
11月7日公开的漏洞记录CVE-2026-123974涉及TorchServe。模型服务把归档展开到临时目录，并在随后运行其中的处理程序。如果目录位置可预先知道，同一主机上的本地用户就可能替换处理文件，让操作以模型服务账户的身份执行。问题出现在部署模型和加载程序的交界处，公告标注为影响全部版本。版本清单标出的受影响范围包括*之前的版本。
这条记录给出的CVSS 3.1基础评分为7.8分，分级为高危。按照评分列出的条件，利用者需要具备本地访问条件，需要已有低权限账户或相当的访问权，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。
https://lightroom.adobe.com/shares/f26ad2b9f9aefb49bf44b0391811373e
https://lightroom.adobe.com/shares/7fe336f335ad0b47b03569079fcec261
https://lightroom.adobe.com/shares/e8f6ba57e8c76b41a51f369d217932eb
https://lightroom.adobe.com/shares/29fb78e1a2bfb740bb1c5b96bdf8f1a6
https://lightroom.adobe.com/shares/137a436098e6074e84dfa957b7a38f67
https://lightroom.adobe.com/shares/773cfeaff4f2d64486cf8b76ba0bac55
https://lightroom.adobe.com/shares/6d7b570192e6994ab149b05008adf742
https://lightroom.adobe.com/shares/2f049fcd30a9294591c05739ac0e2097
https://lightroom.adobe.com/shares/63b60bfceacb3d45b7d4811c2153e7e0
https://lightroom.adobe.com/shares/68b2e552d4411a4398ed5c22390a8a2b
https://lightroom.adobe.com/shares/06385b04971a0743874ef6435ca73085
https://lightroom.adobe.com/shares/743bee3564932f4993ebb9cb19f1bf9d
https://lightroom.adobe.com/shares/14ec7bc84cda87429f46e97f961d3f0c
https://lightroom.adobe.com/shares/caca77eda140834c941d63ff8ac0e7f8
https://lightroom.adobe.com/shares/3e04e82970d9fc44b289e7032d2e3fb0
https://lightroom.adobe.com/shares/6c5c87dbbd439d45b9a7e9ff1074df6b
https://lightroom.adobe.com/shares/9ca16a1e778ea9479d2534a7809b3fc1
https://lightroom.adobe.com/shares/082ebbfe44ceca4186459aeed56801ff
https://lightroom.adobe.com/shares/9baf8175699e6c40a477e5e76d0766d4
https://lightroom.adobe.com/shares/a2bac0e529cc374c8d2e5a5647cad46e
https://lightroom.adobe.com/shares/f7444c8c9c1db542a057a3a579bae6ed
https://lightroom.adobe.com/shares/016f48b9ed869440afa3889d09a41e19
https://lightroom.adobe.com/shares/ee6b104f0ace384996b46e94cfb9cf39
https://lightroom.adobe.com/shares/cd7acba84b64744fa2e669fc02975cee
https://lightroom.adobe.com/shares/8f987d56f33d9c4a97b2745dc20a7ac7
https://lightroom.adobe.com/shares/11ae79ec2fa6b34bba6c9aed322d76c1
https://lightroom.adobe.com/shares/2930eb30390c85428ccea704615e5b4a
https://lightroom.adobe.com/shares/666eff373cbc89449d6146741b657340
https://lightroom.adobe.com/shares/305613dce3c1e8469f3e3801874f9ebc
https://lightroom.adobe.com/shares/5d1faa7a6400844bad5be0918f8eec86
https://lightroom.adobe.com/shares/e59bad9242009f479863c53f1b4a8250
https://lightroom.adobe.com/shares/50a9d32b311a1849b12f5343e34a2851
https://lightroom.adobe.com/shares/0874b108456a7b45a4ffe82cc4e44127
https://lightroom.adobe.com/shares/8ba5840fd153c241a0d9f724b76def2b
https://lightroom.adobe.com/shares/0d762787a189b543b58ce45e90d8a836
https://lightroom.adobe.com/shares/7b701929e29ef04ea08469a198f5ab3a
https://lightroom.adobe.com/shares/2df2cd30a2a6804da53a6741e971b982
https://lightroom.adobe.com/shares/78cbcedc7181274c8ce8bc497f4e9ec8
https://lightroom.adobe.com/shares/a3632138378cf34c96d42cbeaa303558
https://lightroom.adobe.com/shares/a42c3229c959f44e87ae45957fc17281
https://lightroom.adobe.com/shares/e27833b7f745f745b1bc9b8eb54e3e95
https://lightroom.adobe.com/shares/90ac86e535cc124e8404ff233cebaeb9
https://lightroom.adobe.com/shares/9ea8763c4ddbdd4e994d2f1b90b63e0d
https://lightroom.adobe.com/shares/ef501ad87ede3f439a2512c79c3e32bf
https://lightroom.adobe.com/shares/63cb4d034000b841bf18b49f6440dd7b
https://lightroom.adobe.com/shares/e8554d20451f384b87e0106331beaa98
https://lightroom.adobe.com/shares/3afe8245fa891b4b8d3fc6300f9b65b5
https://lightroom.adobe.com/shares/2bd86cf838cd5145b58c5642a63ba5e6
https://lightroom.adobe.com/shares/2fd3a0accaa4a64b8a5900abdc852f8c
https://lightroom.adobe.com/shares/31533b26438114498acf8ea41e664898
小手一抖，沙发到手！
页:
[1]