Skip to content

[9.4] [ML] Fail closed on incomplete TorchScript pre-load state-hook scan (#3149) - #3154

Merged
elastic-vault-github-plugin-prod[bot] merged 1 commit into
9.4from
backport/9.4/pr-3149
Aug 13, 2026
Merged

[9.4] [ML] Fail closed on incomplete TorchScript pre-load state-hook scan (#3149)#3154
elastic-vault-github-plugin-prod[bot] merged 1 commit into
9.4from
backport/9.4/pr-3149

Conversation

@elastic-vault-github-plugin-prod

@elastic-vault-github-plugin-prod elastic-vault-github-plugin-prod Bot commented Aug 13, 2026

Copy link
Copy Markdown
Contributor

Backport

This will backport the following commits from main to 9.4:

Questions ?

Please refer to the Backport tool documentation

@edsavage @cursoragent
[ML] Fail closed on incomplete TorchScript pre-load state-hook scan (#…
9a2ccba 
…3149)

Reject unreadable or oversized zip record names so path-length truncation
cannot skip the __setstate__/__getstate__ scan before torch::jit::load.

Co-authored-by: Cursor <cursoragent@cursor.com>
(cherry picked from commit 277bac2)
@elastic-vault-github-plugin-prod elastic-vault-github-plugin-prod Bot added backport :ml >bug auto-backport Automatically merge backport PRs when CI passes labels Aug 13, 2026
@elastic-vault-github-plugin-prod elastic-vault-github-plugin-prod Bot mentioned this pull request Aug 13, 2026
Merged
3 tasks
github-actions[bot]
github-actions Bot approved these changes Aug 13, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated approval: clean backport of an already-reviewed change. Auto-merge is armed and will merge once the required CI checks are green.

@elastic-vault-github-plugin-prod
elastic-vault-github-plugin-prod Bot merged commit 5f706c9 into 9.4 Aug 13, 2026
35 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

@edsavage edsavage

Labels

auto-backport Automatically merge backport PRs when CI passes backport >bug :ml v9.4.6

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@edsavage @elasticsearchmachine