pytorch vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20242
3. 20252
4. 20263

Newest CVEs

• CVE-2026-123974

  pytorch/serve: Local privilege escalation through insecure temporary path

  PyTorch · TorchServe

  High7.8
• CVE-2026-65918

  PyTorch torchvision GIF Decoder Out-of-bounds Heap Read

  pytorch · vision

  High7.1
• CVE-2026-24747

  PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

  pytorch · pytorch

  High8.8
• CVE-2025-32434

  PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

  pytorch · pytorch

  Critical9.3
• CVE-2024-6577

  Unclaimed S3 Bucket Usage in pytorch/serve

  pytorch · pytorch/serve

  Medium6.3
• CVE-2024-35198

  TorchServe bypass allowed_urls configuration

  pytorch · serve

  Critical9.8
• CVE-2024-35199

  TorchServe gRPC Port Exposure

  pytorch · serve

  High8.2
• CVE-2023-48299

  TorchServe ZipSlip

  pytorch · serve

  Medium5.3
• CVE-2023-43654

  TorchServe Server-Side Request Forgery

  pytorch · serve

  Critical10.0