CVE-2025-32434
CRITICALPyTorch < 2.6.0 - Remote Code Execution via torch.load with weights_only=True
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2025-32434. PoCs published by adminlove520, Soildworks, B1tBit.
AI-analyzed exploit summary The repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and functional code.
Description
PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution (RCE) vulnerability exists in PyTorch when loading a model using torch.load with weights_only=True. This issue has been patched in version 2.6.0.
Exploits (4)
The repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and functional code.
This repository provides a detailed technical writeup and implementation of a zero-shot evaluation pipeline for OpenAI's CLIP model on CIFAR-10, including solutions to security and engineering challenges such as CVE-2025-32434 (PyTorch security protocols blocking insecure .bin files).
This is a working PoC for CVE-2025-32434, demonstrating RCE in PyTorch versions < 2.6.0 via malicious pickle deserialization in torch.load() with weights_only=True. The exploit crafts a malicious model file that bypasses the protection mechanism.
This repository contains a working proof-of-concept exploit for CVE-2025-32434, demonstrating arbitrary file write via PyTorch's JIT script serialization. The exploit leverages `torch.from_file` with `shared=True` to write a reverse shell cron job to `/etc/cron.d/rev`.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H