Torchdistill
Monthly
Deserialization of attacker-influenced checkpoint files in torchdistill through 1.1.5 can lead to arbitrary code execution in the context of the process that invokes load_ckpt, but exploitation requires local access and low privileges and depends on the application loading an untrusted src_ckpt file. Publicly available exploit code exists, and there is no indication of confirmed active exploitation (CISA KEV). Overall priority is low-to-moderate because default workflows that load only trusted, self-generated checkpoints are not exposed.
Deserialization of attacker-influenced checkpoint files in torchdistill through 1.1.5 can lead to arbitrary code execution in the context of the process that invokes load_ckpt, but exploitation requires local access and low privileges and depends on the application loading an untrusted src_ckpt file. Publicly available exploit code exists, and there is no indication of confirmed active exploitation (CISA KEV). Overall priority is low-to-moderate because default workflows that load only trusted, self-generated checkpoints are not exposed.