PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.pth`) that, when loaded with `torch.load(..., weights_only=True)`, can corrupt memory and potentially lead to arbitrary code execution. Version 2.10.0 fixes the issue.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in
    PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.pth`) that,
    when loaded with `torch.load(..., weights_only=True)`, can corrupt memory and potentially lead to
    arbitrary code execution. Version 2.10.0 fixes the issue. (CVE-2026-24747)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in     PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.pth`) that,     when loaded with `torch.load(..., weights_only=True)`, can corrupt memory and potentially lead to     arbitrary code execution. Version 2.10.0 fixes the issue. (CVE-2026-24747)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
437368	SCA: security update for pytorch (GHSA-63cw-57p8-fm3p)	Tenable Cloud Security	SCA Checks	high
437368	SCA: security update for pytorch (GHSA-63cw-57p8-fm3p)	Tenable Self-Hosted Container Security	SCA Checks	high
297037	Linux Distros Unpatched Vulnerability : CVE-2026-24747	Nessus	Misc.	high

Detections

Analytics

CVE-2026-24747

high

Tenable Plugins

high

high

high