CVE-2025-4742

Medium

Description

A vulnerability classified as problematic has been found in XU-YIJIE grpo-flat up to 9024b43f091e2eb9bac65802b120c0b35f9ba856. Affected is the function main of the file grpo_vanilla.py. The manipulation leads to deserialization. Local access is required to approach this attack. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

SeverityMedium

CVSS5.3

Exploit probability—

ProductXu-yijie Grpo-flat

PublishedMay 16, 2025

First seenMay 16, 2025

Weakness typeCWE-502Deserialization of untrusted data CWE-20Improper input validation

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

Product	Affected versions	Fixed in
XU-YIJIE grpo-flat	9024b43f091e2eb9bac65802b120c0b35f9ba856	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.