CVE-2026-24747
High · 8.8PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files
CVSS
8.8
EPSS
0.8%
Published
Jan 27, 2026
CISA due date
—
The record
A vulnerability in PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.pth`) that, when loaded with `torch.load(..., weights_only=True)`, can corrupt memory and potentially lead to arbitrary code execution.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | pytorch | 0 | 2.10.0 |
| Bitnami | pytorch | 0 | 2.10.0 |
Related vulnerabilities
- GHSA-63cw-57p8-fm3p PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files Same vulnerability
- CVE-2025-32434 PyTorch: `torch.load` with `weights_only=True` leads to remote code execution Also affects pytorch
- CVE-2025-63396 An issue was discovered in PyTorch v2.5 and v2.7.1. Also affects pytorch
- CVE-2025-3730 PyTorch Improper Resource Shutdown or Release vulnerability Also affects pytorch
- CVE-2025-2953 A vulnerability, which was classified as problematic, has been found in PyTorch… Also affects pytorch
- CVE-2024-48063 In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. Also affects pytorch
- CVE-2026-114724 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection… CWE-502
- CVE-2026-112081 A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. CWE-502