Deserialization Vulnerability in Intel Extension for PyTorch Software

CVE-2026-35502

What is CVE-2026-35502?

A deserialization flaw exists in earlier versions of Intel Extension for PyTorch, allowing unprivileged adversaries to exploit this weakness to escalate privileges. This vulnerability requires local access to the system and involves an unauthenticated user. While the risk is contingent upon the attacker's knowledge and user interaction, its potential consequences could impact the confidentiality, integrity, and availability of the affected systems at a minimal level. Users and administrators should stay informed and apply necessary patches to safeguard against this vulnerability.

References