netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-53q9-r3pm-6pq6

Browse Source
This commit is contained in:
advisory-database[bot]
2025-05-23 17:15:17 +00:00
parent 7ee3973e56
commit beca40dccb
1 changed files with 21 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2025/04/GHSA-53q9-r3pm-6pq6/GHSA-53q9-r3pm-6pq6.json
+21 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-53q9-r3pm-6pq6",
"modified": "2025-04-18T18:34:22Z",
"modified": "2025-05-23T17:13:40Z",
"published": "2025-04-18T15:19:28Z",
"aliases": [
"CVE-2025-32434"
],
"summary": "PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",
"details": "# Description\nI found a Remote Command Execution (RCE) vulnerability in the PyTorch. When load model using torch.load with weights_only=True, it can still achieve RCE. \n\n# Background knowledge\nhttps://github.com/pytorch/pytorch/security \n As you can see, the PyTorch official documentation considers using `torch.load()` with `weights_only=True` to be safe.\n![image](https://github.com/user-attachments/assets/fdaa8520-d66a-473a-ab1f-163d793de298)\nSince everyone knows that weights_only=False is unsafe, so they will use the weights_only=True to mitigate the security issue.\nBut now, I just proved that even if you use weights_only=True, it still can achieve RCE.\nSo it is time to update your PyTorch version~.\n\n# Credit\nThis vulnerability was found by Ji'an Zhou.",
"details": "# Description\nI found a Remote Command Execution (RCE) vulnerability in PyTorch. When loading model using torch.load with weights_only=True, it can still achieve RCE. \n\n# Background knowledge\nhttps://github.com/pytorch/pytorch/security \n As you can see, the PyTorch official documentation considers using `torch.load()` with `weights_only=True` to be safe.\n![image](https://github.com/user-attachments/assets/fdaa8520-d66a-473a-ab1f-163d793de298)\nSince everyone knows that weights_only=False is unsafe, so they will use the weights_only=True to mitigate the seucirty issue.\nBut now, I just proved that even if you use weights_only=True, it can still achieve RCE.\n\n# Credit\nThis vulnerability was found by Ji'an Zhou.",
"severity": [
{
"type": "CVSS_V4",
@@ -36,6 +36,25 @@
"database_specific": {
"last_known_affected_version_range": "<= 2.5.1"
}
},
{
"package": {
"ecosystem": "PyPI",
"name": "pytorch"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.5.1"
}
]
}
]
}
],
"references": [