Is CVE-2025-65886 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-65886 being exploited in the wild.

How severe is CVE-2025-65886?

High severity, with a CVSS score of 7.5, published 28 January 2026.

Is there a fix for CVE-2025-65886?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-65886 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2025-65886?

Check whether you run Oneflow. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-65886: Oneflow-Inc OneFlow denial of service via shape mismatch in flow.eye

CVE-2025-65886 · Severity: high · CVSS 7.5 · Published 2026-01-28

OneFlow is a deep learning framework used for building and training artificial intelligence models. A vulnerability in the way it handles mathematical operations between different data structures can cause the software to crash. An attacker could exploit this to disrupt AI services or research environments, leading to a denial of service.

Technologies: Oneflow. Vendors: Oneflow.

Quick answers

Is CVE-2025-65886 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-65886 being exploited in the wild.
How severe is CVE-2025-65886?: High severity, with a CVSS score of 7.5, published 28 January 2026.
Which products and versions are affected?: Oneflow-Inc OneFlow 0.9.0.
Is there a fix for CVE-2025-65886?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-65886 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2025-65886?: Check whether you run Oneflow. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A shape mismatch vulnerability exists in OneFlow v0.9.0 when performing operations between tensors and other data structures, specifically involving the 'flow.eye' and 'diag' functions. The root cause is a failure to properly validate or handle inconsistent dimensions between operands, leading to a segmentation fault and core dump (CWE-400). An attacker can trigger this crash by supplying crafted tensor shapes to the affected functions. The vulnerability is reachable via network if the framework is exposed through an API that processes user-supplied tensor dimensions. As of the advisory, this is identified in version 0.9.0.

Affected products

Oneflow-Inc OneFlow 0.9.0

Timeline

2025-06-30: disclosed: Issue reported on GitHub repository
2026-01-28: advisory: CVE published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.