MediumVulnerability
CVE-2026-4538: PyTorch 2.10.0 deserialization flaw in pt2 Loading Handler via local access
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-4538
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
CVE-2026-4538 affects PyTorch 2.10.0, specifically an unknown function in the pt2 Loading Handler component. Manipulation of this component leads to deserialization, and the attack can only be performed from a local environment. A public exploit is available, and the project was informed early through a pull request but has not responded; NVD has not yet provided an assessment, while VulDB rates it CVSS 4.0 4.8 MEDIUM.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- HighCVE-2026-123974: TorchServe local privilege escalation via predictable /tmp extraction directorySame vendor · NVD/CVE Database
- HighCVE-2026-77177: Open GenAI Stack code execution via prompt injection with Jinja2 templatesSame vendor · NVD/CVE Database
- MediumCVE-2026-89278: GPTranslate WordPress plugin exposes plaintext API key to unauthenticated usersSame vendor · NVD/CVE Database
- MediumChina-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI CompaniesSame vendor · CISA Cybersecurity Advisories
- MediumCVE-2025-55554: pytorch integer overflow in torch.nan_to_num long conversionSame vendor · NVD/CVE Database