Skip to content
fr Sign in
9.3 Critical

CVE-2025-32434 PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built…

Description

PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution (RCE) vulnerability exists in PyTorch when loading a model using torch.load with weights_only=True. This issue has been patched in version 2.6.0.

Affected products and versions

Product Affected versions Fixed in
pytorch 2.6 earliest → < 2.6.0 2.6.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of pytorch

The 4 CVEs of pytorch →
CVE-2026-24747 PyTorch is a Python package that provides tensor computation 8.8 High CVE-2024-48063 In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE Not rated CVE-2024-31580 PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component… 4.0 Medium
Track this CVE