CVE-2025-46148: Medium severity PyTorch PyTorch vulnerability
Published Sep 25, 2025
·Updated
In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.
Affected Software
2 affected components
PyTorch PyTorch<=2.6.0
linuxfoundation Pytorch Python<=2.6.0
Remediation
Patch Available
Event History
Sep 25, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:16 PM
RemedyDescriptionSeverityAffected Software
Sep 29, 2025
Data Sourced
via Microsoft·01:01 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-46148?
CVE-2025-46148 has been classified with a moderate severity due to potential inaccuracies in result outputs.
2
How do I fix CVE-2025-46148?
To fix CVE-2025-46148, upgrade PyTorch to version 2.6.1 or later where the issue is addressed.
3
What systems are affected by CVE-2025-46148?
CVE-2025-46148 affects all versions of PyTorch up to and including 2.6.0.
4
What is the impact of using CVE-2025-46148 in production?
Using CVE-2025-46148 in production can lead to incorrect results in calculations involving nn.PairwiseDistance(p=2).
5
Is there a workaround for CVE-2025-46148 before upgrading?
Currently, there are no recommended workarounds for CVE-2025-46148 other than upgrading to a fixed version.