Arbitrary Code Execution Vulnerability in PyTorch Before Version 2.10.0
CVE-2026-24747

8.8HIGH

Key Information:

Vendor: Pytorch
Status: Pytorch
Vendor: CVE Published:; 27 January 2026

What is CVE-2026-24747?

A vulnerability exists in PyTorch that affects the weights_only unpickler, allowing attackers to create a malicious checkpoint file (.pth). When this file is loaded using torch.load(..., weights_only=True), it can corrupt memory, posing a risk of arbitrary code execution. This issue has been resolved in version 2.10.0. It is critical for users to upgrade to this version to safeguard their systems against possible exploitation.