Cyber Resilience

CVE-2025-71008

Oneflow 0.9.0

Public PoC
Published
29 January 2026
Modified
03 February 2026
Patch / advisory
View advisory
CVSS Score v3.1 6.2
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0014 4th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2025-71008 is a medium-severity an unspecified weakness vulnerability in Oneflow Oneflow. Its CVSS base score is 6.2 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified map to SI-10 (Information Input Validation) and SI-2 (Flaw Remediation) — see the control section below for these in your framework.

EU & UK References

Vulnerability Data

A segmentation violation in the oneflow._oneflow_internal.autograd.Function.FunctionCtx.mark_non_differentiable component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

CWE(s)
NVD-CWE-noinfo

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
attack.mitre.org →
Why these techniques?

The segmentation fault in the autograd component is directly triggered by crafted input to crash the process, matching Application or System Exploitation for DoS.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2025-70999Same product: Oneflow Oneflow
CVE-2025-65886Same product: Oneflow Oneflow
CVE-2025-71009Same product: Oneflow Oneflow
CVE-2025-71006Same product: Oneflow Oneflow
CVE-2025-71000Same product: Oneflow Oneflow
CVE-2025-71002Same product: Oneflow Oneflow
CVE-2025-65887Same product: Oneflow Oneflow
CVE-2025-71011Same product: Oneflow Oneflow
CVE-2025-71007Same product: Oneflow Oneflow
CVE-2025-71004Same product: Oneflow Oneflow

Affected Assets

oneflow
oneflow
0.9.0

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)
  • SI-10 Information Input Validation
  • SI-2 Flaw Remediation
  • SI-16 Memory Protection
Detect
Catch it (NIST detect / respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)

—

Mitigating Controls (NIST 800-53 r5) AI

SI-10 Information Input Validation good match
prevent

Directly validates inputs to autograd functions such as mark_non_differentiable to reject crafted data that triggers the segmentation violation.

SI-2 Flaw Remediation good match
prevent

Requires prompt remediation of the identified flaw in OneFlow v0.9.0 before an attacker can supply the malicious input.

SI-16 Memory Protection partial match
prevent

Applies memory-protection mechanisms that can contain or prevent process crashes resulting from the segmentation violation.

References