AIKIDO-2026-636203

TL;DR

PyTorch bundles the third-party tensorpipe library, which statically links an outdated copy of libuv into distributed C++ binaries such as libtorch_cpu.so. That libuv copy truncates hostnames longer than 256 characters before passing them to getaddrinfo, so a crafted long hostname can be made to resolve to an unintended address. Code paths that resolve externally influenced hostnames can therefore be steered toward internal destinations, enabling server-side request forgery. The fix updates the bundled libuv dependency to a version that no longer truncates hostnames unsafely.