# Community Notice: :pytorch: Critical CVE

**URL:** https://community.ultralytics.com/t/community-notice-critical-cve/1024
**Category:** News
**Tags:** pytorch
**Created:** [April 29, 2025, 1:47pm UTC](https://community.ultralytics.com/t/community-notice-critical-cve/1024 "2025-04-29T13:47:43Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![BurhanQ](https://sea1.discourse-cdn.com/flex001/user_avatar/community.ultralytics.com/burhanq/32/7_2.png) [@BurhanQ](https://community.ultralytics.com/u/BurhanQ)
#### Post date: [April 29, 2025, 1:47pm UTC](https://community.ultralytics.com/t/community-notice-critical-cve/1024/1 "2025-04-29T13:47:43Z")

</div>

# [CVE-2025-32434](https://www.cve.org/CVERecord?id=CVE-2025-32434) in PyTorch

A critical vulnerability (CVSS 9.3) 💀 has been identified in PyTorch versions **\< 2.6.0**. Exploiting this issue via `torch.load` with `weights_only=True` could allow **remote code execution (RCE)** due to deserialization of untrusted data.

### **Affected Versions:** PyTorch \< 2.6.0

### **Fix:** Upgrade to **PyTorch 2.6.0 or later**.

### **Reference:** [PyTorch GitHub Advisory](https://github.com/pytorch/pytorch/security/advisories/GHSA-53q9-r3pm-6pq6)

## **Recommended Actions:**

- Update to the most recent version of PyTorch compatible with your system if possible.
- If you’re unable to update, you should evaluate the risk for your situation.
- Always ensure that you’re downloading and loading weights from an official and trusted source.