Intel Extension for PyTorch Untrusted Deserialization Privilege Escalation (CVE-2026-35502) Advisory

Vulnerability Overview Vulnerability Name: Intel® Extension for PyTorch Software Advisory CVE ID: CVE-2026-35502 Vulnerability Description: Certain versions of Intel® Extension for PyTorch software prior to version 2.8.0 are susceptible to issues related to the deserialization of untrusted data, which may lead to privilege escalation. Attackers can exploit this vulnerability with low attack complexity and without requiring special internal knowledge or user interaction. CVSS Score: 4.6 Medium CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/V:C/N:L/AV:L/SC:N/SI:N/SA:N Affected Products Affected Product: All versions of Intel® Extension for PyTorch software Remediation Recommended Action: Intel has issued a product discontinuation notice. Users are advised to uninstall or cease using Intel® Extension for PyTorch software as soon as possible. Related Link: Product Discontinuation Notice for Intel® Extension for PyTorch software Additional Information Publication Date: August 11, 2026 Last Revised Date: August 11, 2026 Acknowledgments: Thanks to Tahira Muhammad for reporting this issue. Legal Disclaimer Intel provides these materials "as is" and without any warranties, whether express or implied. Intel products and described services may contain design defects or errors, known as errata, which may cause the product to deviate from published specifications. Products that have reached end-of-service updates may no longer receive feature and security updates. Intel's technical capabilities and benefits depend on system configuration and may require enabled hardware, software, or service activation. Performance varies depending on system configuration. No product or component can be guaranteed to be absolutely secure. Certain results are estimated or simulated through internal Intel analysis, architectural simulations/modeling, and are for informational purposes only. Any differences in system hardware, software, or configuration may affect actual performance. Intel, the Intel logo, and other Intel logos are trademarks of Intel Corporation or its subsidiaries. Report a Vulnerability If you have information regarding security issues or vulnerabilities affecting Intel-branded products or technologies, please submit a report via the Intigriti platform. For questions about reporting security vulnerabilities, please contact Intel PSIRT. For questions related to Intel's external websites (intel.com and related subdomains), please contact Intel's External Security Research Team. Need Product Support? If you have questions regarding the security features of Intel products, need technical support, or wish to obtain product updates or patches, please visit Support & Downloads.

Goal Reached Thanks to every supporter — we hit 100%!

Intel Extension for PyTorch Untrusted Deserialization Privilege Escalation (CVE-2026-35502) Advisory