CVE-2025-65891
Published: 28 January 2026
Summary
CVE-2025-65891 is a high-severity Uncontrolled Resource Consumption (CWE-400) vulnerability in Oneflow Oneflow. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 9.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-10 (Information Input Validation).
Deeper analysis
CVE-2025-65891 is a GPU device-ID validation flaw present in OneFlow version 0.9.0. The vulnerability resides in the flow.cuda.get_device_properties() function, which does not properly validate device indices, permitting invalid or negative values to be processed and leading to a crash.
The vulnerability has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating it is exploitable over the network with low attack complexity, no privileges or user interaction required, and results in high availability impact through denial of service (DoS). Remote attackers can invoke the affected function with an invalid or negative device index to trigger resource exhaustion or process termination on systems running the vulnerable OneFlow instance, as classified under CWE-400 (Uncontrolled Resource Consumption).
Mitigation details and related discussions are available in the vendor references, including the OneFlow website at http://oneflow.com, the project repository at https://github.com/Oneflow-Inc/oneflow, and the specific issue tracker at https://github.com/Oneflow-Inc/oneflow/issues/10661. Security practitioners should review these for patches or workarounds in OneFlow v0.9.0 and later versions.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-206473
Vulnerability details
A GPU device-ID validation flaw in OneFlow v0.9.0 allows attackers to trigger a Denial of Dervice (DoS) by invoking flow.cuda.get_device_properties() with an invalid or negative device index.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Vulnerability directly enables remote exploitation of the application to trigger crash/resource exhaustion (DoS) via invalid input to exposed function.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Flaw remediation directly addresses the GPU device-ID validation flaw in OneFlow v0.9.0 by requiring identification, reporting, and correction of the vulnerability in flow.cuda.get_device_properties().
Information input validation enforces checking of device indices at entry points, preventing invalid or negative values from being processed and causing DoS crashes.
Denial-of-service protection limits the effects of remote attackers invoking the flawed function with invalid device indices, mitigating high availability impact from resource exhaustion or process termination.