CVE-2026-62997

Kedro-Datasets provides data connectors for Kedro. From version 5.0.0 until 9.5.0, kedro_datasets_experimental.pytorch.PyTorchDataset in kedro-datasets loads .pt model files with torch.load without enforcing weights_only=True, and user-supplied load_args are silently dropped. On PyTorch versions earlier than 2.6, a malicious pickle-backed model from an attacker-influenced shared registry, downloaded checkpoint, or partitioned external source can execute arbitrary code when a Kedro pipeline loads it.

An attacker can supply a malicious model file via a shared registry, checkpoint, or external source and achieve code execution in the environment running the Kedro pipeline. The issue affects only the opt-in experimental component.

Update kedro-datasets to version 9.5.0 or later. Load only trusted model files and consider upgrading PyTorch to version 2.6 or later.