海光信息：充分运用政策工具 拟斥资5亿至8亿元回购公司股份

yun2025

海光信息：充分运用政策工具 拟斥资5亿至8亿元回购公司股份

TorchServe：模型解包目录可预测导致本地提权风险

11月7日公开的漏洞记录CVE-2026-123974涉及TorchServe。模型服务把归档展开到临时目录，并在随后运行其中的处理程序。如果目录位置可预先知道，同一主机上的本地用户就可能替换处理文件，让操作以模型服务账户的身份执行。问题出现在部署模型和加载程序的交界处，公告标注为影响全部版本。版本清单标出的受影响范围包括*之前的版本。

这条记录给出的CVSS 3.1基础评分为7.8分，分级为高危。按照评分列出的条件，利用者需要具备本地访问条件，需要已有低权限账户或相当的访问权，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU4ODEwNzE2NA==.html
https://v.youku.com/v_show/id_XNjU3ODQwNTM2OA==.html
https://v.youku.com/v_show/id_XNjU3ODQwNjg2MA==.html
https://v.youku.com/v_show/id_XNjU3ODQwNjg1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODQxMjkxNg==.html
https://v.youku.com/v_show/id_XNjU3ODQwNjgyOA==.html
https://v.youku.com/v_show/id_XNjU3ODQwOTkwNA==.html
https://v.youku.com/v_show/id_XNjU4ODEwMzgxMg==.html
https://v.youku.com/v_show/id_XNjU4ODEwNTM2MA==.html
https://v.youku.com/v_show/id_XNjU4ODEwNjkwMA==.html
https://v.youku.com/v_show/id_XNjU4ODEwNjg4MA==.html
https://v.youku.com/v_show/id_XNjU4ODEwMjI1Ng==.html
https://v.youku.com/v_show/id_XNjU4ODEwMjE5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODQwOTcyMA==.html
https://v.youku.com/v_show/id_XNjU3ODQwOTcxNg==.html
https://v.youku.com/v_show/id_XNjU4ODEwNjc5Mg==.html
https://v.youku.com/v_show/id_XNjU4ODEwNjc4OA==.html
https://v.youku.com/v_show/id_XNjU4ODEwMzU4NA==.html
https://v.youku.com/v_show/id_XNjU4ODEwMjExNg==.html
https://v.youku.com/v_show/id_XNjU4ODEwNjY4MA==.html
https://v.youku.com/v_show/id_XNjU4ODA5OTE2OA==.html
https://v.youku.com/v_show/id_XNjU4ODEwNjY2NA==.html
https://v.youku.com/v_show/id_XNjU3ODQwNDkzMg==.html
https://v.youku.com/v_show/id_XNjU3ODQwNDkyOA==.html
https://v.youku.com/v_show/id_XNjU4ODEwMDQ2OA==.html
https://v.youku.com/v_show/id_XNjU4ODEwMDQ2MA==.html
https://v.youku.com/v_show/id_XNjU4ODEwMDQ0NA==.html
https://v.youku.com/v_show/id_XNjU4ODEwMTg4NA==.html
https://v.youku.com/v_show/id_XNjU3ODQwMzgwMA==.html
https://v.youku.com/v_show/id_XNjU4ODA5OTAwNA==.html
https://v.youku.com/v_show/id_XNjU4ODEwMzI5Ng==.html
https://v.youku.com/v_show/id_XNjU4ODA5ODk4OA==.html
https://v.youku.com/v_show/id_XNjU4ODEwNjQ0MA==.html
https://v.youku.com/v_show/id_XNjU3ODQwMjI2OA==.html
https://v.youku.com/v_show/id_XNjU3ODQwMjI1Ng==.html
https://v.youku.com/v_show/id_XNjU4ODA5NDM2MA==.html
https://v.youku.com/v_show/id_XNjU4ODA5NDM1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODQwMzcwNA==.html
https://v.youku.com/v_show/id_XNjU4ODA5NDI1Ng==.html
https://v.youku.com/v_show/id_XNjU4ODA5NTkyMA==.html
https://v.youku.com/v_show/id_XNjU4ODA5NzQ5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODQwMDYxNg==.html
https://v.youku.com/v_show/id_XNjU4ODA5NzQ3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODM5OTA4MA==.html
https://v.youku.com/v_show/id_XNjU4ODA5NTgyMA==.html
https://v.youku.com/v_show/id_XNjU3ODQwMzUzNg==.html
https://v.youku.com/v_show/id_XNjU4ODEwMDA4MA==.html
https://v.youku.com/v_show/id_XNjU3ODQwMzUwOA==.html
https://v.youku.com/v_show/id_XNjU4ODEwMDA3Ng==.html
https://v.youku.com/v_show/id_XNjU4ODA5NTc4OA==.html