CVE database · LLM gateways and model serving
TorchServe vulnerabilities and CVEs
The Beam CVE database tracks 6 security advisories for TorchServe: 3 critical, 1 high and 2 medium severity. The newest is CVE-2024-6577, published Mar 20, 2025.
PyTorch's model serving tool, with management and inference APIs.
Check your version: pip show torchserve
- Vulnerabilities tracked
- 6
- Critical
- 3
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 0
All entries, newest first
CVE-2024-6577
TorchServe script references S3 bucket without ensuring ownership or confirming accessibility
medium6.3No fixMar 20, 2025CVE-2024-35198
TorchServe vulnerable to bypass of allowed_urls configuration
critical9.8Jul 18, 2024CVE-2024-35199
TorchServe gRPC Port Exposure
high8.2Jul 18, 2024CVE-2023-48299
TorchServe ZipSlip
medium5.3Nov 21, 2023CVE-2023-43654
TorchServe Server-Side Request Forgery vulnerability
critical9.8Oct 2, 2023GHSA-4mqg-h5jf-j9m7
TorchServe Pre-Auth Remote Code Execution
critical9.9Oct 2, 2023