PT-2026-5024 · Facebook · Pytorch

Azraelxuemo · Published 2025-09-17 · Updated 2026-03-19 · CVE-2026-24747

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PyTorch versions prior to 2.10.0

Description PyTorch, a Python package for tensor computation, has an issue in its weights only unpickler. An attacker can create a malicious checkpoint file (.pth) that, when loaded using torch.load(..., weights only=True), can cause memory corruption and potentially lead to arbitrary code execution. The vulnerability stems from improper validation of pickle opcodes and storage metadata within the weights only=True unpickler, specifically related to heap memory corruption via SETITEM/SETITEMS opcodes applied to non-dictionary types and storage size mismatches. The vulnerability is fully weaponized and can lead to remote code execution on any service that supports uploading and running a PyTorch model, even with security hardening.

Recommendations Versions prior to 2.10.0 should be updated to version 2.10.0 or later.

Exploit

Fix

RCE

Deserialization of Untrusted Data

Code Injection

Weakness Enumeration

CWE-502

CWE-94

Related Identifiers

AZL-75293

AZL-75588

BDU:2026-01224

BIT-PYTORCH-2026-24747

CVE-2026-24747

GHSA-63CW-57P8-FM3P

Affected Products

Pytorch

References · 28

• 🔥 https://github.com/pytorch/pytorch/issues/163105 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24747.json · Exploit
• https://github.com/pytorch/pytorch/security/advisories/GHSA-63cw-57p8-fm3p · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-24747 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-24747 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-24747 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-63cw-57p8-fm3p · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-24747 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-24747 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01224 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-24747 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-pytorch-2026-24747 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-75588 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24747 · Security Note
• https://osv.dev/vulnerability/AZL-75293 · Vendor Advisory