The vulnerability resides in TorchServe, where the temporary extraction directory is predictable and located in /tmp. A local user can replace the model handler by creating files in that location, causing TorchServe to load malicious code under its service account. This results in local privilege escalation, allowing the attacker to execute code with the rights of the service account and potentially gain wider system access.

All PyTorch TorchServe instances are affected, regardless of version, because each installation contains the insecure default temporary path handling. No specific version exclusions are noted.

The CVSS score of 7.8 indicates significant severity. While EPSS data is not available, the admission that the exploit requires local access suggests that an attacker must have local user privileges or the ability to write to /tmp. The flaw is not yet listed in CISA KEV, yet the combination of a predictable path and the lack of ownership checks makes it a straightforward local privilege escalation vector for users who can manipulate files in /tmp or influence the extraction process.