Executive brief
OneFlow is an open-source deep learning framework used to build and train artificial intelligence models. A flaw in how the software handles specific data inputs can cause the system to crash unexpectedly. This could allow an attacker to disrupt AI services or research operations by forcing the application to shut down.
Technical details
A type validation vulnerability exists in the flow.dstack() component of OneFlow v0.9.0. The issue stems from improper handling of input types, specifically when a mixture of OneFlow tensors and NumPy arrays are passed to the function, leading to a type mismatch. This root cause triggers a segmentation fault and subsequent core dump (CWE-400). An attacker can exploit this by providing specially crafted inputs to the affected function, resulting in a complete denial of service for the application. The vulnerability is reachable over the network if the application exposes an interface that processes user-supplied data through this component.
Affected products
- Oneflow-Inc OneFlow 0.9.0
Timeline
- 2025-06-30: disclosed: Issue reported on GitHub repository
- 2026-01-28: advisory: CVE published to NVD