Skip to content
OpenAdvisories

Vendor

pytorch

9 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-32434 Public exploit

    PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

    PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution (RCE) vulnerability exists in PyTorch when loading…

  • Critical 10.0
    CVE-2023-43654 Public exploit EPSS 42%

    TorchServe Server-Side Request Forgery

    TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken ad…