PyPI/pytorch CVE-2026-24747: high 8.8, EPSS 0.80%

PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

Action: Upgrade pytorch to 2.10.0 or later.

pip install pytorch==2.10.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1856
• https://github.com/pytorch/pytorch/security/advisories/GHSA-63cw-57p8-fm3p
• https://nvd.nist.gov/vuln/detail/CVE-2026-24747
• https://github.com/pytorch/pytorch/issues/163105
• https://github.com/pytorch/pytorch
• https://github.com/pytorch/pytorch/163122/commit/954dc5183ee9205cbe79876ad05dd2d9ae752139
• https://github.com/pytorch/pytorch/releases/tag/v2.10.0
• https://pypi.org/project/pytorch
• https://github.com/advisories/GHSA-63cw-57p8-fm3p

CVE-2026-24747 · published 2026-07-07T16:03:20.837738Z · modified 2026-07-13T07:26:23.701611780Z · JSON