进博会酒类展台热闹背后：进口酒也开始“卖生活方式”了

yun2025

进博会酒类展台热闹背后：进口酒也开始“卖生活方式”了

TorchServe：模型解包目录可预测导致本地提权风险

11月7日公开的漏洞记录CVE-2026-123974涉及TorchServe。模型服务把归档展开到临时目录，并在随后运行其中的处理程序。如果目录位置可预先知道，同一主机上的本地用户就可能替换处理文件，让操作以模型服务账户的身份执行。问题出现在部署模型和加载程序的交界处，公告标注为影响全部版本。版本清单标出的受影响范围包括*之前的版本。

这条记录给出的CVSS 3.1基础评分为7.8分，分级为高危。按照评分列出的条件，利用者需要具备本地访问条件，需要已有低权限账户或相当的访问权，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU4NzkyNzc1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODIzNzIwMA==.html
https://v.youku.com/v_show/id_XNjU3ODI0MDExMg==.html
https://v.youku.com/v_show/id_XNjU4NzkyNDYzMg==.html
https://v.youku.com/v_show/id_XNjU4NzkzMDQ0MA==.html
https://v.youku.com/v_show/id_XNjU4NzkyNDYyNA==.html
https://v.youku.com/v_show/id_XNjU4NzkyMzIwMA==.html
https://v.youku.com/v_show/id_XNjU4NzkyNDYyOA==.html
https://v.youku.com/v_show/id_XNjU4NzkyNzc0MA==.html
https://v.youku.com/v_show/id_XNjU4NzkyNDYxMg==.html
https://v.youku.com/v_show/id_XNjU3ODI0MDEwMA==.html
https://v.youku.com/v_show/id_XNjU4NzkzMDQyMA==.html
https://v.youku.com/v_show/id_XNjU3ODIzODU3Mg==.html
https://v.youku.com/v_show/id_XNjU4NzkyNDYwMA==.html
https://v.youku.com/v_show/id_XNjU4NzkzMDQxMg==.html
https://v.youku.com/v_show/id_XNjU4NzkzMDQwNA==.html
https://v.youku.com/v_show/id_XNjU3ODIzODU0MA==.html
https://v.youku.com/v_show/id_XNjU3ODIzNzEzNg==.html
https://v.youku.com/v_show/id_XNjU4NzkyNjA0MA==.html
https://v.youku.com/v_show/id_XNjU4NzkyNDU0MA==.html
https://v.youku.com/v_show/id_XNjU3ODIzNzA5Ng==.html
https://v.youku.com/v_show/id_XNjU4NzkyNDUxMg==.html
https://v.youku.com/v_show/id_XNjU4NzkyNjAwOA==.html
https://v.youku.com/v_show/id_XNjU3ODIzNDMxMg==.html
https://v.youku.com/v_show/id_XNjU4NzkyNjAwNA==.html
https://v.youku.com/v_show/id_XNjU3ODIzNzA4MA==.html
https://v.youku.com/v_show/id_XNjU4NzkyNzY0MA==.html
https://v.youku.com/v_show/id_XNjU4NzkyODg2MA==.html
https://v.youku.com/v_show/id_XNjU4NzkyMzA4OA==.html
https://v.youku.com/v_show/id_XNjU3ODIzNDI5Ng==.html
https://v.youku.com/v_show/id_XNjU4NzkyNDQ3Ng==.html
https://v.youku.com/v_show/id_XNjU4NzkyMzA4NA==.html
https://v.youku.com/v_show/id_XNjU3ODIzNDI4MA==.html
https://v.youku.com/v_show/id_XNjU4NzkyNzYzMg==.html
https://v.youku.com/v_show/id_XNjU4NzkyNzYyOA==.html
https://v.youku.com/v_show/id_XNjU3ODIzMjc5Mg==.html
https://v.youku.com/v_show/id_XNjU4NzkyMzA4MA==.html
https://v.youku.com/v_show/id_XNjU4NzkyNDQ2NA==.html
https://v.youku.com/v_show/id_XNjU3ODIzMjc5Ng==.html
https://v.youku.com/v_show/id_XNjU4NzkyNzYxMg==.html
https://v.youku.com/v_show/id_XNjU3ODIzNDI3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODIzMjc3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODIzNDI2NA==.html
https://v.youku.com/v_show/id_XNjU4NzkyNzYwNA==.html
https://v.youku.com/v_show/id_XNjU3ODIzNTYwNA==.html
https://v.youku.com/v_show/id_XNjU4NzkyODgyOA==.html
https://v.youku.com/v_show/id_XNjU4NzkyNDQ0MA==.html
https://v.youku.com/v_show/id_XNjU4NzkyNzU4OA==.html
https://v.youku.com/v_show/id_XNjU4NzkyNzU5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODIzNzA0MA==.html