Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
This is sadly distinct from CVE-2025-32434. Moreover, any vulns in weights_only=True are real security issues for our users - it's supposed to be a safe function.
Unfortunately, both the commit and bug number provided in the NVD for this vuln seem unrelated. Luckily, I was able to find the patch: https://github.com/pytorch/pytorch/commit/0e2459f08fc5329979e6ad986014278f2a87618c