CVE-2024-48063: PyTorch RemoteModule Deserialization RCE Vulnerability
Summary
CVE-2024-48063: In PyTorch. Affects torch versions < 2.5.0. Fixed in 2.5.0. How to fix ↓
Also tracked for
The same CVE-2024-48063 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
PyTorch is an open-source machine learning library widely used for applications such as computer vision and natural language processing. It provides a flexible and efficient platform for building deep learning models. However, versions up to 2.4.1 are vulnerable to a remote code execution (RCE) issue due to improper handling of deserialization in its RemoteModule feature, which is used in distributed computing environments.
Vulnerability Detail
In PyTorch versions <=2.4.1, the RemoteModule component is susceptible to a deserialization remote code execution vulnerability. This issue arises from the way data is deserialized in distributed computing contexts, allowing an attacker to execute arbitrary code on the server. While some parties dispute the classification of this as a vulnerability, arguing it is intended behavior, the potential for exploitation remains a significant concern, especially in environments where untrusted data may be processed.
How To Fix
Latest published version: 2.14.1 as of 22 Oct 2026
pip install --upgrade "torch==2.14.1"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2.5.0
This is the first release that contains the fix.
pip install --upgrade "torch==2.5.0"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the RemoteModule feature in PyTorch until you can upgrade to a secure version. Additionally, ensure that any data being deserialized comes from a trusted source to mitigate the risk of exploitation.
Conclusion
The deserialization RCE vulnerability in PyTorch versions up to 2.4.1 poses a significant risk, particularly in distributed computing environments. Users are strongly advised to upgrade to version 2.5.0 or later to mitigate this risk. Additionally, employing Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for torch →
FAQ
The CVSS score for this vulnerability is 9.8, indicating a critical level of severity.
PyTorch versions up to and including 2.4.1 are affected by this vulnerability.
Deserialization RCE refers to a vulnerability where an attacker can execute arbitrary code on a server by manipulating the data that is deserialized by the application.
Yes, some parties dispute the classification of this issue as a vulnerability, claiming it is intended behavior in PyTorch's distributed computing framework.
You can use Vulert, a tool that monitors and alerts for open-source vulnerabilities. By uploading your Pipfile.lock to the Vulert playground, you can check if your application is affected by this vulnerability without any signup.
Related vulnerabilities
Recent vulnerabilities recorded for torch.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
