SnakeYAML deserialization RCE (TorchServe & many AI/ML stacks)
Date: 2022-12
Affected: snakeyaml <= 1.31 (TorchServe 0.3.0 - 0.8.1)
Attack vector: deserialization
Category: real-world
Severity: Critical
CVE: CVE-2022-1471
CWE: CWE-20
CWE-502
CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L)

SnakeYAML <= 1.31 (used by TorchServe 0.3.0 - 0.8.1 and many AI/ML stacks) unsafe deserialization: attacker can upload a model with a malicious YAML file triggering RCE.


Mitigations:

Architectural layers (MAESTRO):