Vulnerability PYSEC-2026-139
High Risk
HIGH RISK
CVSS Score: 7.8
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
7 months ago
March 22, 2026 at 05:16 AM UTC
No summary available
1.0.0 - 2.10.0
1.0.0 - 2.10.0
Details
A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Low Risk
3 months ago
PyTorch Improper Resource Shutdown or Release vulnerability
1.0.0 - 2.7.1 PYSEC-2026-1970
1.0.0 - 2.7.1 PYSEC-2026-1970
High Risk
9 months ago
No summary available
1.0.0 - 2.9.1 PYSEC-2026-2286
1.0.0 - 2.9.1 PYSEC-2026-2286
High Risk
9 months ago
PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files
1.0.0 - 2.9.1 GHSA-63cw-57p8-fm3p
1.0.0 - 2.9.1 GHSA-63cw-57p8-fm3p
Low Risk
11 months ago
No summary available
1.0.0 - 2.5.0 PYSEC-2025-210
1.0.0 - 2.5.0 PYSEC-2025-210
High Risk
1 year ago
No summary available
1.0.0 - 2.7.0 PYSEC-2025-209
1.0.0 - 2.7.0 PYSEC-2025-209
Impacted packages
Timeline
Published
7 months ago
March 22, 2026 at 05:16 AM UTC
Last Modified
5 months ago
May 21, 2026 at 03:00 PM UTC