PT-2026-137842

CVE-2026-83494

·

Published

2026-11-06

·

Updated

2026-11-06

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

A flaw was found in the training-operator. An incorrect object casting in the PyTorchJob ValidateUpdate webhook allows users to bypass an immutability check. This vulnerability could enable users to detach a queued job from its quota management system or hijack a running job's controller ownership. The primary impact is a Denial of Service (DoS) condition.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-693: Protection Mechanism Failure
Related identifiers
CVE-2026-83494
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com