CVE-2026-62997 Details
Description
Kedro-Datasets provides data connectors for Kedro. From version 5.0.0 until 9.5.0, kedro_datasets_experimental.pytorch.PyTorchDataset in kedro-datasets loads .pt model files with torch.load without enforcing weights_only=True, and user-supplied load_args are silently dropped. On PyTorch versions earlier than 2.6, a malicious pickle-backed model from an attacker-influenced shared registry, downloaded checkpoint, or partitioned external source can execute arbitrary code when a Kedro pipeline loads it. The issue affects only the opt-in kedro_datasets_experimental component and does not affect users who load only trusted files. This issue is fixed in version 9.5.0.
A remote code execution vulnerability exists in the experimental PyTorchDataset component of Kedro-Datasets, affecting versions 5.0.0 prior to 9.5.0. The vulnerability arises because PyTorchDataset loads .pt model files using torch.load() without the necessary safety measures, allowing maliciously crafted files to execute arbitrary code. This issue is particularly concerning for users on PyTorch versions earlier than 2.6, who load models from untrusted sources.
Users should upgrade to Kedro-Datasets version 9.5.0 or later. After upgrading, the PyTorchDataset component can be used safely, as the update enforces safe loading practices by default.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 16, 2026CISA-ADP
Assessed Sep 17, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/kedro-org/kedro-plugins/commit/4d6deb7a7ecba483d33fd43e2a6c063bcf22f413 | [email protected] | Source CodeVendor |
| https://github.com/kedro-org/kedro-plugins/issues/1431 | [email protected] | Issue TrackingTechnical DescriptionVendor |
| https://github.com/kedro-org/kedro-plugins/pull/1433 | [email protected] | Issue TrackingVendor |
| https://github.com/kedro-org/kedro-plugins/releases/tag/kedro-datasets-9.5.0 | [email protected] | Release NotesVendor |
| https://github.com/kedro-org/kedro-plugins/security/advisories/GHSA-f9q4-h45w-jrrq | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Kedro-Datasets | >= 5.0, < 9.5.0 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 17, 2026 | CVE Modified | CISA-ADP |
| Sep 16, 2026 | New CVE Received | [email protected] |