High severity7.5NVD Advisory· Published Sep 25, 2025· Updated Jun 17, 2026

CVE-2025-55557

Description

A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pytorch/Pytorchllm-fuzzy2 versions
=2.7.0+ 1 more
- (no CPE)range: =2.7.0
- (no CPE)
Linux Foundation/Pytorch
cpe:2.3:a:linuxfoundation:pytorch:*:*:*:*:*:python:*:*
Range: <=2.7.0
osv-coords
pkg:bitnami/pytorch
Range: < 2.7.1

Patches

Vulnerability mechanics

References

github.com/pytorch/pytorch/pull/151931nvdIssue TrackingPatch
gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efcnvdThird Party Advisory
github.com/pytorch/pytorch/issues/151738nvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000