PT-2025-33729 · Volcengine · Volcengine Verl

Hao Fan + 1 · Published 2025-08-19 · Updated 2025-08-19 · CVE-2025-50461

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Volcengine versions 3.0.0

Description: A deserialization vulnerability exists in Volcengine's scripts/model merger.py script when using the "fsdp" backend. The script calls torch.load() with weights only=False on user-supplied .pt files, allowing attackers to execute arbitrary code if a maliciously crafted model file is loaded. An attacker can exploit this by convincing a victim to download and place a malicious model file in a local directory with a specific filename pattern. This vulnerability may lead to arbitrary code execution with the privileges of the user running the script.

Recommendations: Volcengine version 3.0.0: Avoid using the "fsdp" backend with user-supplied .pt files. As a temporary workaround, consider restricting access to the scripts/model merger.py script to minimize the risk of exploitation.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2025-50461

Affected Products

Volcengine Verl

References · 10

• 🔥 https://github.com/Anchor0221/CVE-2025-50461 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-50461 · Security Note
• https://osv.dev/vulnerability/CVE-2025-50461 · Vendor Advisory
• https://github.com/pytorch/pytorch/blob/main/SECURITY.md#loading-untrusted-data · Note
• https://github.com/volcengine/verl/blob/main/scripts/model_merger.py#L152 · Note
• https://github.com/volcengine/verl · Note
• https://t.me/cveNotify/132834 · Telegram Post
• https://t.me/CVEtracker/30356 · Telegram Post
• https://twitter.com/CVEnew/status/1957808769611477051 · Twitter Post
• https://pytorch.org/docs/stable/generated/torch.load.html · Note