瞄准存量住房焕新需求 宜家进博会首发“轻定制”方案

yun2025

瞄准存量住房焕新需求 宜家进博会首发“轻定制”方案

TorchServe：模型解包目录可预测导致本地提权风险

11月7日公开的漏洞记录CVE-2026-123974涉及TorchServe。模型服务把归档展开到临时目录，并在随后运行其中的处理程序。如果目录位置可预先知道，同一主机上的本地用户就可能替换处理文件，让操作以模型服务账户的身份执行。问题出现在部署模型和加载程序的交界处，公告标注为影响全部版本。版本清单标出的受影响范围包括*之前的版本。

这条记录给出的CVSS 3.1基础评分为7.8分，分级为高危。按照评分列出的条件，利用者需要具备本地访问条件，需要已有低权限账户或相当的访问权，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU4ODQzMzI2OA==.html
https://v.youku.com/v_show/id_XNjU4ODQzNjA5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODcxNTg4MA==.html
https://v.youku.com/v_show/id_XNjU3ODcyMTYzMg==.html
https://v.youku.com/v_show/id_XNjU3ODcyMTYyNA==.html
https://v.youku.com/v_show/id_XNjU4ODQzMzIzNg==.html
https://v.youku.com/v_show/id_XNjU3ODcxNTg3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODcxNTg2OA==.html
https://v.youku.com/v_show/id_XNjU3ODcxNzM3Mg==.html
https://v.youku.com/v_show/id_XNjU4ODQzNDcwNA==.html
https://v.youku.com/v_show/id_XNjU3ODcxNDE0OA==.html
https://v.youku.com/v_show/id_XNjU4ODQzNDcwMA==.html
https://v.youku.com/v_show/id_XNjU3ODcxNzMxMg==.html
https://v.youku.com/v_show/id_XNjU3ODcxODU1Mg==.html
https://v.youku.com/v_show/id_XNjU4ODQzNDY2MA==.html
https://v.youku.com/v_show/id_XNjU3ODcxNzI5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODcwOTU3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODcxODUzMg==.html
https://v.youku.com/v_show/id_XNjU3ODcxNzI4NA==.html
https://v.youku.com/v_show/id_XNjU3ODcxNDAzNg==.html
https://v.youku.com/v_show/id_XNjU3ODcwOTQ5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODcxODQ0NA==.html
https://v.youku.com/v_show/id_XNjU3ODcxNzIwNA==.html
https://v.youku.com/v_show/id_XNjU3ODcxODQzNg==.html
https://v.youku.com/v_show/id_XNjU3ODcxNzE5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODcwOTQ4NA==.html
https://v.youku.com/v_show/id_XNjU3ODcxODQyMA==.html
https://v.youku.com/v_show/id_XNjU4ODQzNDU0OA==.html
https://v.youku.com/v_show/id_XNjU3ODcwOTQ3Mg==.html
https://v.youku.com/v_show/id_XNjU4ODQzMTcwOA==.html
https://v.youku.com/v_show/id_XNjU3ODcxMDk4MA==.html
https://v.youku.com/v_show/id_XNjU3ODcxMDk3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODcxMDk2OA==.html
https://v.youku.com/v_show/id_XNjU3ODcxNTYwMA==.html
https://v.youku.com/v_show/id_XNjU4ODQzMjk4OA==.html
https://v.youku.com/v_show/id_XNjU3ODcxNTU5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODcxMDk2MA==.html
https://v.youku.com/v_show/id_XNjU3ODcxNTU4NA==.html
https://v.youku.com/v_show/id_XNjU4ODQzMTY5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODcxMDk0NA==.html
https://v.youku.com/v_show/id_XNjU3ODcxMDkyOA==.html
https://v.youku.com/v_show/id_XNjU4ODQzMTY0MA==.html
https://v.youku.com/v_show/id_XNjU3ODcxMDg3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODcxMjU0MA==.html
https://v.youku.com/v_show/id_XNjU3ODcxNTUxNg==.html
https://v.youku.com/v_show/id_XNjU3ODcxMDg2NA==.html
https://v.youku.com/v_show/id_XNjU3ODcxNTUxMg==.html
https://v.youku.com/v_show/id_XNjU3ODcxNTUwOA==.html
https://v.youku.com/v_show/id_XNjU4ODQzMTYzMg==.html
https://v.youku.com/v_show/id_XNjU3ODcxMDg1Mg==.html