cve-2025-32434-poc

CVE-2025-32434 Descrição Detalhes Técnicos O ponto de entrada da vulnerabilidade é load em torch/serialization.py quando a proteção weightsonly está habilitada: ao carregar um arquivo tar, estas funções seriam chamadas em cadeia: 1. load: torch/serialization.py:1117 2. loadlegacy: de...

CVE-2025-32434-exploit

Überblick Dieser Exploit demonstriert eine kritische Remote-Code-Ausführungs-Sicherheitslücke CVE-2025-32434 in PyTorch-Versionen /tmp/whoami" Test the exploit loads the model to verify RCE python3 exploit.py -c "id" -t Advanced exploit variant with alternative bypass python3 exploit.py --advance...

PYSEC-2026-3967

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the loadstate function that imports and executes attacker-controlled module names from checkpoint instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass...

PYSEC-2026-3967

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the loadstate function that imports and executes attacker-controlled module names from checkpoint instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass...