The vulnerability of the weightsOnly parameter in the torch.load() function of the PyTorch machine learning framework allows a hacker to execute arbitrary code.

The vulnerability of the weightsOnly parameter in the torch.load function of the PyTorch machine learning framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...