{"id":112852,"date":"2024-01-12T15:10:15","date_gmt":"2024-01-12T13:10:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-na-infrastrukturu-pytorch-komprometiruyushhaya-repozitorij-i-relizy"},"modified":"2026-02-13T23:24:49","modified_gmt":"2026-02-13T21:24:49","slug":"ataka-na-infrastrukturu-pytorch-komprometiruyushhaya-repozitorij-i-relizy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/ataka-na-infrastrukturu-pytorch-komprometiruyushhaya-repozitorij-i-relizy","title":{"rendered":"Ataque \u00e0 infraestrutura do PyTorch, comprometendo o reposit\u00f3rio e as vers\u00f5es","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Foram revelados detalhes do ataque \u00e0 infraestrutura utilizada no desenvolvimento do framework de aprendizado de m\u00e1quina PyTorch, que permitiu a extra\u00e7\u00e3o de chaves de acesso suficientes para alojar dados arbitr\u00e1rios no reposit\u00f3rio de lan\u00e7amentos do projeto no GitHub e na AWS, al\u00e9m de injetar c\u00f3digo na ramifica\u00e7\u00e3o principal do reposit\u00f3rio e adicionar um backdoor atrav\u00e9s de depend\u00eancias. A substitui\u00e7\u00e3o dos lan\u00e7amentos do PyTorch poderia ser utilizada para realizar ataques a grandes empresas, como Google, Meta, Boeing e Lockheed Martin, que utilizam o PyTorch em seus projetos. No \u00e2mbito do programa Bug Bounty, a Meta pagou aos pesquisadores $16.250 por informa\u00e7\u00f5es sobre a vulnerabilidade. <\/p>\n

A ess\u00eancia do ataque est\u00e1 na possibilidade de execu\u00e7\u00e3o de seu c\u00f3digo em servidores<\/a> integra\u00e7\u00e3o cont\u00ednua, realizando reconfigura\u00e7\u00f5es e execu\u00e7\u00e3o de tarefas para testar novas altera\u00e7\u00f5es enviadas ao reposit\u00f3rio. O problema afeta projetos que utilizam seus pr\u00f3prios processadores externos 'Self-Hosted Runner' com GitHub Actions. Ao contr\u00e1rio dos tradicionais GitHub Actions, os processadores Self-Hosted s\u00e3o executados n\u00e3o na infraestrutura do GitHub, mas em suas pr\u00f3prias servidores ou em m\u00e1quinas virtuais<\/a> mantidas pelos desenvolvedores. <\/p>\n

A execu\u00e7\u00e3o de tarefas de constru\u00e7\u00e3o em seus pr\u00f3prios servidores permite organizar a execu\u00e7\u00e3o de c\u00f3digo que pode realizar a varredura da rede interna da empresa, procurar na FS local chaves de criptografia e tokens de acesso, analisar vari\u00e1veis de ambiente com par\u00e2metros de acesso a armazenamento externo ou servi\u00e7os em nuvem. Na aus\u00eancia de isolamento adequado do ambiente de constru\u00e7\u00e3o, dados confidenciais encontrados podem ser enviados para fora por atacantes, por exemplo, atrav\u00e9s de chamadas a APIs externas. Para determinar a utiliza\u00e7\u00e3o de 'Self-Hosted Runner' em projetos, pode ser usada a ferramenta Gato, que analisa arquivos de workflow p\u00fablicos e logs de execu\u00e7\u00e3o de tarefas CI. <\/p>\n

No PyTorch e em muitos outros projetos que utilizam 'Self-Hosted Runner', a execu\u00e7\u00e3o de tarefas de constru\u00e7\u00e3o \u00e9 permitida apenas para desenvolvedores cujas altera\u00e7\u00f5es foram previamente revisadas e inclu\u00eddas na base de c\u00f3digo do projeto. A presen\u00e7a do status 'contributor' ao utilizar configura\u00e7\u00f5es padr\u00e3o no reposit\u00f3rio permite a execu\u00e7\u00e3o de processadores GitHub Actions ao enviar pull requests e, consequentemente, executar seu c\u00f3digo em qualquer ambiente GitHub Actions Runner vinculado ao reposit\u00f3rio ou \u00e0 organiza\u00e7\u00e3o que gerencia o projeto. <\/p>\n

A vincula\u00e7\u00e3o ao status de \"contributor\" foi facilmente contornada \u2014 foi suficiente enviar uma pequena altera\u00e7\u00e3o previamente e aguardar sua aceita\u00e7\u00e3o na base de c\u00f3digo, ap\u00f3s o que o desenvolvedor automaticamente recebia o status de participante ativo, cujos pull requests podiam ser testados na infraestrutura CI sem verifica\u00e7\u00e3o separada. Para obter o status de desenvolvedor ativo, foram utilizadas pequenas altera\u00e7\u00f5es cosm\u00e9ticas, relacionadas \u00e0 corre\u00e7\u00e3o de erros de digita\u00e7\u00e3o na documenta\u00e7\u00e3o. Para obter acesso ao reposit\u00f3rio e ao armazenamento de releases do PyTorch durante o ataque, foi realizado o sequestro de um token do GitHub, usado para acessar o reposit\u00f3rio a partir de processos de build, assim como chaves da AWS, utilizadas para salvar os resultados da compila\u00e7\u00e3o. <\/p>\n

O problema n\u00e3o \u00e9 espec\u00edfico do PyTorch e afeta muitos outros grandes projetos que utilizam configura\u00e7\u00f5es padr\u00e3o para \"Self-Hosted Runner\" no GitHub Actions. Por exemplo, menciono a realiza\u00e7\u00e3o de ataques semelhantes para injetar um backdoor em algumas grandes carteiras de criptomoedas e projetos de blockchain com bilion\u00e1ria capitaliza\u00e7\u00e3o, realiza\u00e7\u00e3o de mudan\u00e7as nos releases do Microsoft Deepspeed e TensorFlow, comprometimento de um dos aplicativos da CloudFlare, assim como execu\u00e7\u00e3o de c\u00f3digo em computadores na rede da Microsoft. Os detalhes sobre esses incidentes ainda n\u00e3o foram divulgados. No \u00e2mbito dos programas de Bug Bounty em vigor, pesquisadores enviaram mais de 20 solicita\u00e7\u00f5es para receber recompensas que totalizam v\u00e1rias centenas de milhares de d\u00f3lares.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0434\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u043f\u0440\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f PyTorch, \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0432\u0448\u0443\u044e \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043a\u043b\u044e\u0447\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0441 \u0440\u0435\u043b\u0438\u0437\u0430\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432 GitHub \u0438 AWS, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043a\u043e\u0434\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u0443\u044e \u0432\u0435\u0442\u043a\u0443 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u0440\u0435\u043b\u0438\u0437\u043e\u0432 PyTorch \u043c\u043e\u0433\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112852","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ataque \u00e0 infraestrutura PyTorch, comprometendo o reposit\u00f3rio e os releases | ProHoster","description":"Foram revelados detalhes do ataque \u00e0 infraestrutura utilizada no desenvolvimento do framework de aprendizado de m\u00e1quina PyTorch, que permitiu a extra\u00e7\u00e3o de chaves de acesso suficientes para hospedar dados arbitr\u00e1rios no reposit\u00f3rio de releases.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/ataka-na-infrastrukturu-pytorch-komprometiruyushhaya-repozitorij-i-relizy","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 PyTorch, \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044e\u0449\u0430\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0438 \u0440\u0435\u043b\u0438\u0437\u044b | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0434\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u043f\u0440\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f PyTorch, \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0432\u0448\u0443\u044e \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043a\u043b\u044e\u0447\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0441 \u0440\u0435\u043b\u0438\u0437\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/ataka-na-infrastrukturu-pytorch-komprometiruyushhaya-repozitorij-i-relizy","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-12T13:10:15+00:00","article:modified_time":"2026-02-13T21:24:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"112852","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-13 21:24:49","updated":"2026-02-13 21:24:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/112852","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=112852"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/112852\/revisions"}],"predecessor-version":[{"id":164381,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/112852\/revisions\/164381"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=112852"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=112852"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=112852"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}