Read the docs
TI-2024-23271 Aliases CVE-2024-35199GHSA-hhpg-v63p-wp7w

TorchServe gRPC Port Exposure

Priority MEDIUM 43CWE-668Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.

Summary

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. In affected versions the two gRPC ports 7070 and 7071, are not bound to [localhost](http://localhost/) by default, so when TorchServe is launched, these two interfaces are bound to all interfaces. Customers using PyTorch inference Deep Learning Containers (DLC) through Amazon SageMaker and EKS are not affected. This issue in TorchServe has been fixed in PR #3083. TorchServe release 0.11.0 includes the fix to address this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00637 50th percentileScored 2026-11-07
Fix Fixed serve (pytorch): 0.11.0torchserve (PyPI): 0.11.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
pytorchserve0.3.0 to before 0.11.00.11.0Patch availableCNA
—torchserve (PyPI)0.3.0 to before 0.11.00.11.0Patch availableGHSA-hhpg-v63p-wp7w
  • serve Vendorpytorch Affected 0.3.0 to before 0.11.0 Fixed in 0.11.0 Patch available CNA
  • torchserve (PyPI) Vendor— Affected 0.3.0 to before 0.11.0 Fixed in 0.11.0 Patch available GHSA-hhpg-v63p-wp7w

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:pytorch:torchserve:*:*:*:*:*:*:*:*0.3.0 to before 0.11.0Vulnerablepytorch
  • cpe:2.3:a:pytorch:torchserve:*:*:*:*:*:*:*:* Versions 0.3.0 to before 0.11.0 Vulnerable ·pytorch

Remediation

  • Fix · CNA serve (pytorch) Fixed in 0.11.0
  • Fix · GHSA-hhpg-v63p-wp7w torchserve (PyPI) Fixed in 0.11.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-35199
  2. 2026-10-03 Alias added: GHSA-hhpg-v63p-wp7w
  3. 2026-10-25 EPSS moved to the 50th–90th percentile

References

Patch 2

Advisory 1

Other 3

  • TI-2023-23379 TorchServe Server-Side Request Forgery CVSS 3.1CRITICAL 10.0
  • TI-2024-23270 TorchServe bypass allowed_urls configuration CVSS 3.1CRITICAL 9.8
  • TI-2023-26162 TorchServe ZipSlip CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences