ShellTorch the Next Evolution in *4Shell Executions
summary
A chain of four vulnerabilities yields full RCE against TorchServe, documented as CVE-2023-43654 with CVSS 9.8, and tens of thousands of instances exposed; the management API is effectively bound to 0.0.0.0, SnakeYAML’s default constructor allows arbitrary object construction, and an SSRF lets the server download and run attacker jars. A single HTTP POST can overwrite models, enable model theft and silent poisoning so deployed inference can be altered without detection.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:27Shadow vulnerabilities
- 4:15SnakeYAML example
- 8:48Reverse fuzzing
- 12:17ShellTorch and CVEs
- 14:28TorchServe API flaws
- 16:54Code exec via YAML
- 18:19Live demo theft/tamper
- 19:03ShellTorch impact
- 21:30Securing AI infrastructure
- 22:33Community effort
- 24:40Runtime monitoring
- 25:22Automation in research
- 26:46Documentation pitfalls and misconfigurations
- 28:55Defense in depth
- 30:02Q&A
related talks
37mShadow Vulnerabilities in AI/ML Data Stacks - What You Don’t Know...
47mToolShell, Patch Bypass, and the AI That Might Have Seen It Coming
26mStranger Danger: Your Attack Surface Just Got Bigger
28mVanquishing Vulnerabilities in Valencia
52mDevSecOps
50mStranger Danger: Your Java Attack Surface Just Got Bigger
36mSecurity - Only Developers Can Make It Proactive
13mTORCHLIGHT: Shedding LIGHT on Real-World Attacks on Cloudless IoT Devices