AVID-2026-R1486

Description

TorchServe gRPC Port Exposure (CVE-2024-35199)

Details

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. In affected versions the two gRPC ports 7070 and 7071, are not bound to localhost by default, so when TorchServe is launched, these two interfaces are bound to all interfaces. Customers using PyTorch inference Deep Learning Containers (DLC) through Amazon SageMaker and EKS are not affected. This issue in TorchServe has been fixed in PR #3083. TorchServe release 0.11.0 includes the fix to address this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Reason for inclusion in AVID: CVE-2024-35199 targets TorchServe, a core AI model-serving component. It exposes two gRPC ports to all interfaces by default, creating a network-access vulnerability in AI deployment stacks. This is a software vulnerability affecting a component commonly used to build/deploy AI systems, thus relevant to the AI supply chain. A fix exists in TorchServe v0.11.0. The report provides clear impact, affected components, and remediation, indicating a security vulnerability with high impact.

References

Affected or Relevant Artifacts

Developer: pytorch
Deployer: pytorch
Artifact Details:

Type	Name
System	serve

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.1
Vector String	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Base Score	8.2
Base Severity	🔴 High
Attack Vector	NETWORK
Attack Complexity	🟢 Low
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	🟢 Low
Integrity Impact	NONE
Availability Impact	🔴 High

CWE

ID	Description
CWE-668	CWE-668: Exposure of Resource to Wrong Sphere

Other information

Report Type: Advisory
Credits:
Date Reported: 2024-07-18
Version: 0.3.3
AVID Entry