PT-2026-27504 · Facebook+1 · Pytorch+1

Published 2026-03-24 · Updated 2026-03-25 · CVE-2025-33244

Positive Technologies · (AI Summary)

CVSS v3.1

9.0

Critical

AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA APEX for Linux (affected versions not specified)

Description The software contains a flaw where an attacker could cause deserialization of untrusted data. A successful exploit could lead to code execution, denial of service, escalation of privileges, data tampering, and information disclosure. The issue affects environments using PyTorch versions prior to 2.6. The vulnerability allows remote code execution with adjacent network access.

Recommendations Update PyTorch to version 2.6 or later.

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-33244

Affected Products

Nvidia Apex

Pytorch

References · 7

• https://cve.org/CVERecord?id=CVE-2025-33244 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-33244 · Security Note
• https://twitter.com/TheHackerWire/status/2036563899781439730 · Twitter Post
• https://twitter.com/0dayPublishing/status/2036543430420009093 · Twitter Post
• https://nvidia.custhelp.com/app/answers/detail/a_id/5782 · Note
• https://twitter.com/the_yellow_fall/status/2036782650950660116 · Twitter Post
• https://twitter.com/CveFindCom/status/2036559385716035996 · Twitter Post