CVE-2025-50461

A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/model_merger.py script when using the "fsdp" backend. The script calls torch.load() with weights_only=False on user-supplied .pt files, allowing attackers to execute arbitrary code if a maliciously crafted model file is loaded. An attacker can exploit this by convincing a victim to download and place a malicious model file in a local directory with a specific filename pattern. This vulnerability may lead to arbitrary code execution with the privileges of the user running the script.

• CWE-77

• https://github.com/Anchor0221/CVE-2025-50461
• https://github.com/pytorch/pytorch/blob/main/SECURITY.md#loading-untrusted-data
• https://github.com/volcengine/verl
• https://github.com/volcengine/verl/blob/main/scripts/model_merger.py#L152
• https://pytorch.org/docs/stable/generated/torch.load.html

Published

Aug 19, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-50433An issue was discovered in imonnit.com (2025-04-24) allowing…9.8
• CVE-2025-50434A security issue has been identified in Appian Enterprise Bu…5.3
• CVE-2025-50454An Authentication Bypass vulnerability in Blue Access' Cobal…6.5
• CVE-2025-50455SQL injection vulnerability exists in the order_by parameter…9.1
• CVE-2025-5046A maliciously crafted DGN file, when linked or imported into…7.8
• CVE-2025-50460A remote code execution (RCE) vulnerability exists in the ms…9.8
• CVE-2025-50464A buffer overflow vulnerability exists in the upload.cgi mod…6.5
• CVE-2025-50465OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An atta…8.8
• CVE-2025-50466OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An atta…6.5
• CVE-2025-50467OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An atta…6.5
• CVE-2025-50468OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An atta…6.5
• CVE-2025-5047A maliciously crafted DGN file, when parsed through Autodesk…7.8