The open-source PyTorch project is widely used for machine learning (ML) training. Its anticipated 2.0 version is now generally available.

Researchers have discovered a critical flaw in PyTorch’s distributed RPC system, allowing attackers to execute arbitrary commands on the OS and steal AI training data.