Vulnerability · Published Mar 22, 2026 · Assigned by VulDB
CVE-2026-4538PyTorch pt2 Loading deserialization
Medium 5.3
In plain English
A medium-severity unsafe deserialization in PyTorch. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Official description
A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | pytorch | no fix listed | DEBIAN-CVE-2026-4538 |
| Debian:13 | pytorch | no fix listed | DEBIAN-CVE-2026-4538 |
| Debian:14 | pytorch | no fix listed | DEBIAN-CVE-2026-4538 |
| PyPI | torch | no fix listed | PYSEC-2026-139 |
| Ubuntu:22.04:LTS | pytorch | no fix listed | UBUNTU-CVE-2026-4538 |
| Ubuntu:25.10 | pytorch | no fix listed | UBUNTU-CVE-2026-4538 |
| Ubuntu:26.04:LTS | pytorch | no fix listed | UBUNTU-CVE-2026-4538 |
| Ubuntu:26.10 | pytorch | no fix listed | UBUNTU-CVE-2026-4538 |
Affected products (as reported)
Weakness: CWE-502, CWE-20 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-352326 | PyTorch pt2 Loading deserialization vdb-entry
- VDB-352326 | CTI Indicators (IOB, IOC) signature, permissions-required
- Submit #774681 | pytorch PyTorch 2.10.0 Release deserialize third-party-advisory
- https://github.com/pytorch/pytorch/pull/176791 exploit, issue-tracking, patch
- https://github.com/pytorch/pytorch/ product