CVE-2026-24747

HighCVSS 8.8

Published: 27/01/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.70%

49th percentile - higher than 49% of all known CVEs

Summary

A vulnerability in PyTorch prior to version 2.10.0 allows an attacker to craft a malicious checkpoint file (.pth) that, when loaded with `weights_only=True`, can corrupt memory and potentially lead to arbitrary code execution.

Risk Assessment

The risk involves potential remote code execution by an attacker after loading a crafted .pth file, which could lead to system compromise or data theft.

Recommendation

Immediately upgrade PyTorch to version 2.10.0 or later and avoid loading .pth files from untrusted sources.

Other vulnerabilities in PyTorch

CVE-2025-63396Low
In PyTorch versions 2.5 and 2.7.1, omitting profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (DoS).

Original NVD description (English source)

PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.pth`) that, when loaded with `torch.load(..., weights_only=True)`, can corrupt memory and potentially lead to arbitrary code execution. Version 2.10.0 fixes the issue.