cve/2025/CVE-2025-32434.md

CVE-2025-32434

Description

PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution (RCE) vulnerability exists in PyTorch when loading a model using torch.load with weights_only=True. This issue has been patched in version 2.6.0.

POC

Reference

No PoCs from references.

Github

• https://github.com/2h3ph3rd/CVE-2025-32434
• https://github.com/ARPSyndicate/cve-scores
• https://github.com/Adrasteon/JustNewsAgent
• https://github.com/BancaKim/CallbotPoC
• https://github.com/DhwanilPanchani/SecureCode-AI---Intelligent-Vulnerability-Detection-System
• https://github.com/DhwanilPanchani/SecureCode-AI-based-Intelligent-Vulnerability-Detection-System
• https://github.com/Ka10ken1/Jobless-AI
• https://github.com/Ka10kenHQ/Jobless-AI
• https://github.com/Limbicnation/multi-vision-toolkit
• https://github.com/Motive-Music-AB/sibyllai-core
• https://github.com/PuddinCat/GithubRepoSpider
• https://github.com/Sir-Teo/post-training
• https://github.com/Zylan-cell/manga-translator-api
• https://github.com/asko123/dora_controls
• https://github.com/coderkhongodo/baseline_dataVN
• https://github.com/franzheffa/video-search-and-summarization-viize
• https://github.com/geekylax/transformer-model-translation
• https://github.com/gil-feldman-glidetalk/video-search-and-summarization
• https://github.com/ibf-RWTH/a0-Measurements
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/pihu-aims/dealflow-ai
• https://github.com/rae2001/paperless-rag
• https://github.com/rmkraus/video-search-and-summarization
• https://github.com/seheli24/HIT137-Tkinter-HF-GUI
• https://github.com/smirk-dev/VideoCraft
• https://github.com/smirk-dev/VideoCraft-first-iteration
• https://github.com/ssharmaSD/f1-rag
• https://github.com/tanjiti/sec_profile
• https://github.com/wzg7014/USTB-AI