LowVulnerability
CVE-2025-4287: PyTorch denial of service in torch.cuda.nccl.reduce via local attack
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-4287
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
CVE-2025-4287 is a vulnerability in PyTorch 2.6.0+cu124, rated problematic by VulDB. The flaw affects the function torch.cuda.nccl.reduce in torch/cuda/nccl.py and leads to denial of service. The attack requires local access to the host, and the exploit has been publicly disclosed.
Mitigation
The source recommends applying the patch identified as 5827d2061dcb4acd05ac5f8e65d8693a481ba0f5.
Related items
- LowCloakFEM: Agentic FEM Code Generation for Red-Teaming Computational Resource ExhaustionSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- MediumThe Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model ResourcesSimilar attack · Google Threat Intelligence
- InfoThe Blind Spots of Detection: Adversarial Perturbation Attacks against Watchdogs in Distributed LLM InferenceSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- HighCVE-2026-118761: Kubeflow Pipelines decompression bomb in pipeline archive uploadSimilar attack · NVD/CVE Database
- LowOpenCode User Hit with Hostile Backlash After Reporting Free AI LoopholeSimilar attack · Socket Blog