CVE-2025-55557

PYSEC-2025-207 · BIT-pytorch-2025-55557 · CVE-2025-55557

Published Sep 25, 2025 · Modified May 20, 2026

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).

References

ADVISORY https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc
REPORT https://github.com/pytorch/pytorch/issues/151738
FIX https://github.com/pytorch/pytorch/pull/151931

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes

CVE-2025-55557

Description

References

More PyPI vulnerabilities

Start Securing