Skip to content
OpenAdvisories

Vendor

pytorch

9 known vulnerabilities.

Products

serve 4 pytorch 2 vision 1 TorchServe 1 pytorch/serve 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-32434 Public exploit

    PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

    PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution (RCE) vulnerability exists in PyTorch when loading…

    pytorch pytorch pytorch pytorch Debian Azure Linux PyPI
  • Critical 9.8
    CVE-2024-35198

    TorchServe bypass allowed_urls configuration

    TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. TorchServe 's check on allowed_urls configuration can be by-passed if the URL contains characters such as ".." but it does not prevent the model from being dow…

    pytorch serve torchserve PyPI
  • Critical 10.0
    CVE-2023-43654 Public exploit Scanner template EPSS 42%

    TorchServe Server-Side Request Forgery

    TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken ad…

    pytorch serve torchserve PyPI