← Volver a CVEs
CVE-2026-4538
MEDIUM5.3
Descripcion
A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.
Detalles CVE
Puntuacion CVSS v3.15.3
SeveridadMEDIUM
Vector CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vector de ataqueLOCAL
ComplejidadLOW
Privilegios requeridosLOW
Interaccion usuarioNONE
Publicado3/22/2026
Ultima modificacion3/23/2026
Fuentenvd
Avistamientos honeypot0
Debilidades (CWE)
CWE-20CWE-502
Referencias
https://github.com/pytorch/pytorch/(cna@vuldb.com)
https://github.com/pytorch/pytorch/pull/176791(cna@vuldb.com)
https://vuldb.com/?ctiid.352326(cna@vuldb.com)
https://vuldb.com/?id.352326(cna@vuldb.com)
https://vuldb.com/?submit.774681(cna@vuldb.com)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.