A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the
    function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memory corruption. Attacking
    locally is a requirement. The exploit has been disclosed to the public and may be used. (CVE-2025-2999)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the     function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memory corruption. Attacking     locally is a requirement. The exploit has been disclosed to the public and may be used. (CVE-2025-2999)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
460652	Echo: pytorch: security update to 2.12.0+dfsg2-1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
460652	Echo: pytorch: security update to 2.12.0+dfsg2-1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
443050	SCA: security update for torch (GHSA-vgrw-7cvw-pwgx)	Tenable Cloud Security	SCA Checks	Local	medium
443050	SCA: security update for torch (GHSA-vgrw-7cvw-pwgx)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
255896	Linux Distros Unpatched Vulnerability : CVE-2025-2999	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2025-2999

medium

Tenable Plugins

medium

medium

medium

medium

medium