UBUNTU-CVE-2026-123974: High severity ubuntu/pytorch vulnerability
Published Nov 9, 2026
·Updated
In all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the model handler and run code as the TorchServe service account leading to local privilege escalation.
Affected Software
3 affected components
ubuntu/pytorch*
ubuntu/pytorch*
ubuntu/pytorch*
Event History
Nov 9, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Who can exploit this issue?
A local user can exploit it. The attacker needs local access and low privileges, and successful exploitation can execute code as the TorchServe service account.
2
Is user interaction required for exploitation?
No. The vector indicates no user interaction is required once the attacker has the necessary local access.
3
What is the impact if exploitation succeeds?
An attacker can replace a model handler during extraction and execute code as the TorchServe service account. The reported impact includes high confidentiality, integrity, and availability effects.