CVE-2026-24747: linuxfoundation pytorch Code Injection
Vulnerability summary
CVE-2026-24747 is a high (CVSS 8.8) Code Injection vulnerability in linuxfoundation pytorch. EPSS estimates a 0.81% chance of exploitation in the next 30 days, higher than 56.2% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 27-01-2026PublishedVulnerability first disclosed.
- 15-07-2026Last modifiedVulnerability information updated.
Description
PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.pth`) that, when loaded with `torch.load(..., weights_only=True)`, can corrupt memory and potentially lead to arbitrary code execution. Version 2.10.0 fixes the issue.
CVSS metrics
5 scores · 5 sources · 1 version- OSV · PypiEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- NVDNIST8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.81%
Chance of exploitation in the next 30 days
Percentile
56%
Versus all other CVEs
30-day change
+0.09 pp
From 0.72% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundPytorch
Maturity: poc
Weaknesses
CWE · root cause- CWE-94Improper Control of Generation of Code ('Code Injection')The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
- CWE-502Deserialization of Untrusted DataThe product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Affected systems
PyPI2 products
- pytorch< 2.10.0
- torch< 2.10.0
Debian1 product
- pytorchAll versions (No fix recorded) | < 2.12.0+dfsg2-1
Linuxfoundation1 product
- pytorch< 2.10.0
Pytorch1 product
- pytorch< 2.10.0
Ubuntu1 product
- pytorchAll versions (No fix recorded)
5 vendors · 6 products
References
15 links- github.com/pytorch/pytorch/security/advisories/GHSA-63cw-57p8-fm3pX Refsource CONFIRMWEBAdvisoryREPORTVendor Advisory
- github.com/pytorch/pytorch/163122/commit/954dc5183ee9205cbe79876ad05dd2d9ae752139X Refsource MISCWEBFIXREPORTBroken Link
- github.com/pytorch/pytorch/releases/tag/v2.10.0X Refsource MISCWEBAdvisoryREPORTProductRelease Notes
- github.com/pytorch/pytorchPACKAGE
Show all 15 references
- pypi.org/project/pytorchPACKAGE
