GPU VulnDB

Database/AI/ML frameworks & serving

PyTorch (`weights_only` unpickler): Bypass of the `weights_only` allowlist

CVE-2026-24747AI/ML frameworks & servingcurated

Impact

Bypass of the weights_only allowlist → arbitrary code execution

Who can reach it

Customer-supplied checkpoint; defeats the mitigation shipped for CVE-2025-32434

What to do

Rebuild images on torch >= 2.10.0. Proves the format itself, not the flag, is the control — push checkpoint-format policy (safetensors-only ingest) rather than version-chasing

References

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.