CVE-2026-24747— PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files
Quick assessment
Affected
pytorch pytorch
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PyTorch是PyTorch开源的一个 Python 包。 PyTorch 2.10.0之前版本存在代码问题漏洞，该漏洞源于weights_only反序列化器存在缺陷，可能导致内存损坏和任意代码执行。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-24747
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files
Source: CVE Program / CVE List V5
Vulnerability Description
PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.pth`) that, when loaded with `torch.load(..., weights_only=True)`, can corrupt memory and potentially lead to arbitrary code execution. Version 2.10.0 fixes the issue.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
可信数据的反序列化
Source: CVE Program / CVE List V5
Vulnerability Title
PyTorch 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PyTorch是PyTorch开源的一个 Python 包。 PyTorch 2.10.0之前版本存在代码问题漏洞，该漏洞源于weights_only反序列化器存在缺陷，可能导致内存损坏和任意代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-24747
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-24747
请登录查看更多情报信息。
Other References for CVE-2026-24747 (1)
-
Release PyTorch 2.10.0 Release · pytorch/pytorch · GitHub x_refsource_MISC
IV. Related Vulnerabilities
Same product: pytorch
-
CVE-2026-4538
PyTorch pt2 Loading deserialization -
CVE-2025-4287
PyTorch nccl.py torch.cuda.nccl.reduce denial of service -
CVE-2025-32434
PyTorch: `torch.load` with `weights_only=True` leads to remo -
CVE-2025-3730
PyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of s -
CVE-2025-3136
PyTorch CUDACachingAllocator.cpp torch.cuda.memory.caching_a
Same vendor: pytorch
-
CVE-2026-65918
PyTorch torchvision GIF Decoder Out-of-bounds Heap Read -
CVE-2025-32434
PyTorch: `torch.load` with `weights_only=True` leads to remo -
CVE-2024-6577
Unclaimed S3 Bucket Usage in pytorch/serve -
CVE-2024-35198
TorchServe bypass allowed_urls configuration -
CVE-2024-35199
TorchServe gRPC Port Exposure
Same weakness: CWE-502
-
CVE-2026-108958
TensorLayer HDF5 Loading utils.py load_hdf5_graph deserializ -
CVE-2026-108947
yoshitomo-matsubara torchdistill main_util.py load_ckpt dese -
CVE-2026-109361
MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nn -
CVE-2026-109360
MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Ov -
CVE-2026-109237
Crawl4AI 0.9.0 before 0.9.4 Untrusted Config Gate Bypass Lea
V. Comments for CVE-2026-24747
No comments yet