CVE-2026-62997

Name of the Vulnerable Software and Affected Versions kedro-datasets versions 5.0.0 through 9.4.9

Description The kedro datasets experimental.pytorch.PyTorchDataset component loads .pt model files using the torch.load function without enforcing the weights only=True parameter, and it silently drops user-supplied load args. When used with PyTorch versions earlier than 2.6, this allows a malicious pickle-backed model—sourced from a compromised shared registry, downloaded checkpoint, or external source—to execute arbitrary code during the loading process in a Kedro pipeline. This issue specifically affects the opt-in kedro datasets experimental component.

Recommendations Update kedro-datasets to version 9.5.0. As a temporary mitigation, restrict the use of the kedro datasets experimental.pytorch.PyTorchDataset component or ensure only trusted files are loaded.