CVE-2026-35502

Awaiting Analysis Awaiting Analysis - Queue

Intel Extension for PyTorch Deserialization of Untrusted Data Privilege Escalation

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: Intel Corporation

Description

Deserialization of untrusted data for some Intel(R) Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-35502

EUVD

EUVD-2026-56532

Affected Vendors & Products

Vendor	Product	Version / Range
intel	extension_for_pytorch	to 2.8.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-502	The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

Executive Summary

This vulnerability involves deserialization of untrusted data in Intel(R) Extension for PyTorch before version 2.8.0. An unauthenticated attacker with local access and user interaction could exploit it to escalate privileges. The attack has low complexity and requires no special internal knowledge.

Detection Guidance

This vulnerability is specific to Intel(R) Extension for PyTorch before version 2.8.0. Detection involves checking the installed version of the extension. Use commands like pip show intel-extension-for-pytorch or pip list to verify the version.

Impact Analysis

The vulnerability may allow an attacker to gain higher privileges on your system, potentially leading to unauthorized access or control. It could impact confidentiality, integrity, and availability of the system with low severity.

Compliance Impact

This vulnerability may impact confidentiality, integrity, and availability of systems, which could lead to unauthorized access or data breaches. Such incidents could potentially violate compliance requirements under GDPR or HIPAA if sensitive data is exposed or altered.

Mitigation Strategies

Upgrade Intel(R) Extension for PyTorch to version 2.8.0 or later. Remove or disable the vulnerable extension if upgrading is not immediately possible. Ensure all dependencies are updated to avoid further risks.

Hi! I’m here to help you understand CVE-2026-35502. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70