A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function
    torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the
    local host. The exploit has been disclosed to the public and may be used. (CVE-2025-3000)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function     torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the     local host. The exploit has been disclosed to the public and may be used. (CVE-2025-3000)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
459525	Echo: pytorch, torch: security update to 2.13.0	Tenable Cloud Security	Echo Local Security Checks	Local	medium
459525	Echo: pytorch, torch: security update to 2.13.0	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
256473	Linux Distros Unpatched Vulnerability : CVE-2025-3000	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2025-3000

medium

Tenable Plugins

medium

medium

medium