Vulnerability Reportpytorch/pytorch:2.12.1-cuda12.6-cudnn9-devel

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. Over 1,665 vulnerabilities were identified, 202 with severity >=6.0 (max 6.63), including CVE-2026-31402 and CVE-2026-23428. These kernel vulnerabilities require local access and are present in the linux-libc-dev package, which is typically used for development and not loaded at runtime, reducing exploitability. However, an attacker with local shell access could still attempt to leverage them for privilege escalation. The threat score of 50 confirms caution is warranted.