affected:
- ecosystem_specific: {}
  package:
    ecosystem: PyPI
    name: torch
    purl: pkg:pypi/torch
  ranges:
  - events:
    - introduced: '0'
    - last_affected: 2.10.0
    type: ECOSYSTEM
  versions:
  - 1.0.0
  - 1.0.1
  - 1.1.0
  - 1.10.0
  - 1.10.1
  - 1.10.2
  - 1.11.0
  - 1.12.0
  - 1.12.1
  - 1.13.0
  - 1.13.1
  - 1.2.0
  - 1.3.0
  - 1.3.1
  - 1.4.0
  - 1.5.0
  - 1.5.1
  - 1.6.0
  - 1.7.0
  - 1.7.1
  - 1.8.0
  - 1.8.1
  - 1.9.0
  - 1.9.1
  - 2.0.0
  - 2.0.1
  - 2.1.0
  - 2.1.1
  - 2.1.2
  - 2.10.0
  - 2.2.0
  - 2.2.1
  - 2.2.2
  - 2.3.0
  - 2.3.1
  - 2.4.0
  - 2.4.1
  - 2.5.0
  - 2.5.1
  - 2.6.0
  - 2.7.0
  - 2.7.1
  - 2.8.0
  - 2.9.0
  - 2.9.1
aliases:
- CVE-2026-4538
details: A vulnerability was identified in PyTorch 2.10.0. The affected element is
  an unknown function of the component pt2 Loading Handler. The manipulation leads
  to deserialization. The attack can only be performed from a local environment. The
  exploit is publicly available and might be used. The project was informed of the
  problem early through a pull request but has not reacted yet.
id: PYSEC-2026-139
modified: '2026-05-21T14:54:45.309041Z'
published: '2026-03-22T05:16:20.273Z'
references:
- type: WEB
  url: https://github.com/pytorch/pytorch/
- type: ADVISORY
  url: https://vuldb.com/?id.352326
- type: ADVISORY
  url: https://vuldb.com/?submit.774681
- type: REPORT
  url: https://vuldb.com/?ctiid.352326
- type: FIX
  url: https://github.com/pytorch/pytorch/pull/176791
severity:
- score: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  type: CVSS_V3