CVE-2026-4538 Details
Description
A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.
A deserialization vulnerability has been identified in PyTorch version 2.10.0, specifically within the pt2 Loading Handler component. This issue arises because the 'torch.export.load' function does not include a parameter to ensure safe deserialization. As a result, if an untrusted .pt2 file is loaded—particularly one that indicates 'use_pickle: True' in its weights configuration or triggers an exception fallback during deserialization—the system may inadvertently revert to using pickle without proper safeguards. This behavior creates a substantial risk of arbitrary code execution, as the deserialization process can be exploited to execute malicious code under certain conditions.
Users can update to PyTorch versions where this vulnerability has been addressed. The latest version can be downloaded from the official PyTorch website or through the PyTorch GitHub repository.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 23, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/pytorch/pytorch/ | [email protected] | Product |
| https://github.com/pytorch/pytorch/pull/176791 | [email protected] | Issue TrackingPatch |
| https://vuldb.com/?ctiid.352326 | [email protected] | Permissions RequiredVDB Entry |
| https://vuldb.com/?id.352326 | [email protected] | Third Party AdvisoryVDB Entry |
| https://vuldb.com/?submit.774681 | [email protected] | Third Party AdvisoryVDB Entry |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | [email protected] |
| CWE-502 | Deserialization of Untrusted Data | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linuxfoundation pytorch | 2.10.0 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 29, 2026 | Initial Analysis | [email protected] |
| Apr 29, 2026 | Data Remediation | [email protected] |
| Mar 22, 2026 | New CVE Received | [email protected] |