id: PYSEC-2024-259
modified: 2025-07-16T03:09:57.748865Z
published: 2024-10-29T21:15:04Z
aliases:
- CVE-2024-48063
details: 'In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this
  is disputed by multiple parties because this is intended behavior in PyTorch distributed
  computing.'
affected:
- package:
    ecosystem: PyPI
    name: torch
    purl: pkg:pypi/torch
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 2.5.0
  versions:
  - 1.0.0
  - 1.0.1
  - 1.1.0
  - 1.10.0
  - 1.10.1
  - 1.10.2
  - 1.11.0
  - 1.12.0
  - 1.12.1
  - 1.13.0
  - 1.13.1
  - 1.2.0
  - 1.3.0
  - 1.3.1
  - 1.4.0
  - 1.5.0
  - 1.5.1
  - 1.6.0
  - 1.7.0
  - 1.7.1
  - 1.8.0
  - 1.8.1
  - 1.9.0
  - 1.9.1
  - 2.0.0
  - 2.0.1
  - 2.1.0
  - 2.1.1
  - 2.1.2
  - 2.2.0
  - 2.2.1
  - 2.2.2
  - 2.3.0
  - 2.3.1
  - 2.4.0
  - 2.4.1
severity:
- type: CVSS_V3
  score: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
references:
- type: EVIDENCE
  url: https://rumbling-slice-eb0.notion.site/Distributed-RPC-Framework-RemoteModule-has-Deserialization-RCE-in-pytorch-pytorch-111e3cda9e8c8021a7d3cbc61ee1a20c
- type: REPORT
  url: https://github.com/pytorch/pytorch/issues/129228
- type: WEB
  url: https://gist.github.com/hexian2001/c046c066895a963ecc0a2cf9e1180065
- type: WEB
  url: https://github.com/pytorch/pytorch/security/policy#using-distributed-features