CVE-2026-123974: pytorch/serve: Local privilege escalation through insecure temporary path

Published Nov 6, 2026

Updated

In all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the model handler and run code as the TorchServe service account leading to local privilege escalation.

Event History

Nov 6, 2026

CVE Published

via MITRE·07:52 PM

Data Sourced

via MITRE·07:52 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·08:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

A local user on a system running TorchServe can exploit the predictable extraction directory under /tmp. The result is code execution as the TorchServe service account, so exposure depends on whether untrusted or lower-privileged local users can access the host.

What does an attacker need to do to exploit it?

The attacker needs to swap the model handler in TorchServe's predictable temporary extraction directory. This requires local access; no remote exploitation path is described in the available data.

Are any TorchServe versions unaffected?

No. The issue is described as affecting all versions of PyTorch TorchServe.

CVE-2026-123974: pytorch/serve: Local privilege escalation through insecure temporary path

Event History

Frequently Asked Questions

Who can exploit this issue?

What does an attacker need to do to exploit it?

Are any TorchServe versions unaffected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What does an attacker need to do to exploit it?

Are any TorchServe versions unaffected?