cve-2025-32434-poc

CVE-2025-32434 Descripción Detalles Técnicos El punto de entrada de la vulnerabilidad es load en torch/serialization.py cuando la protección weightsonly está habilitada: cargar un archivo tar llamaría a estas funciones en cadena: 1. load: torch/serialization.py:1117 2. loadlegacy:...

CVE-2025-32434-exploit

Resumen Este exploit demuestra una vulnerabilidad crítica de ejecución remota de código CVE-2025-32434 en versiones de PyTorch /tmp/whoami" Test the exploit loads the model to verify RCE python3 exploit.py -c "id" -t Advanced exploit variant with alternative bypass python3 exploit.py --advanced -...

PYSEC-2026-3967

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the loadstate function that imports and executes attacker-controlled module names from checkpoint instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass...

PYSEC-2026-3967

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the loadstate function that imports and executes attacker-controlled module names from checkpoint instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass...