High severity7.8NVD Advisory· Published Nov 6, 2026· Updated Nov 6, 2026
CVE-2026-123974
CVE-2026-123974
Description
In all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the model handler and run code as the TorchServe service account leading to local privilege escalation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.