CVE-2025-55560: Denial of Service Vulnerability in Bitnami PyTorch 2.7.0
Summary
CVE-2025-55560: An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor. Affects pytorch versions < 2.7.1. Fixed in 2.7.1. How to fix ↓
Also tracked for
- torch · PyPI
The same CVE-2025-55560 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PyTorch is an open-source machine learning library widely used for applications such as computer vision and natural language processing. It provides a flexible platform for building deep learning models and is known for its ease of use and dynamic computation graph. However, version 2.7.0 of Bitnami's PyTorch package has a critical vulnerability that can lead to a Denial of Service (DoS) when specific tensor operations are performed.
Vulnerability Detail
The vulnerability arises from the interaction between the torch.Tensor.to_sparse() and torch.Tensor.to_dense() methods when a PyTorch model is compiled using Inductor. This flaw can be exploited to cause the application to become unresponsive, leading to a Denial of Service. The issue is particularly concerning for applications that rely on real-time processing, as it can disrupt service availability and degrade user experience.
How To Fix
Minimum fixed version
2.7.1
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the torch.Tensor.to_sparse() and torch.Tensor.to_dense() methods in your models until you can update to the patched version. This can help mitigate the risk of encountering the Denial of Service issue.
Conclusion
In summary, CVE-2025-55560 is a critical Denial of Service vulnerability in Bitnami's PyTorch version 2.7.0. Users are advised to update to version 2.7.1 or later to mitigate the risk. Temporary workarounds are available, and tools like Vulert can assist in monitoring for vulnerabilities.
See every vulnerability recorded for pytorch →
FAQ
CVE-2025-55560 is a vulnerability in Bitnami's PyTorch version 2.7.0 that can lead to a Denial of Service when specific tensor operations are performed.
If your application uses PyTorch 2.7.0 and performs operations with torch.Tensor.to_sparse() and torch.Tensor.to_dense(), it may become unresponsive, impacting service availability.
As a temporary measure, avoid using the affected tensor methods in your models until you can upgrade to version 2.7.1 or later.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By uploading your manifest file like package-lock.json, you can check for vulnerabilities without needing to access the code.
Vulert provides a platform to monitor open-source vulnerabilities in real-time. You can explore their playground at Vulert Scanner to check if your application is affected by this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for pytorch.
