Lightgbm-org vulnerabilities
We track 1 vulnerability in Lightgbm-org products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Lightgbm-org vulnerabilities
- 7.8 High severity
LightGBM: Out-of-bounds Write
LightGBM through 4.7.0 fails to validate child and split array values when parsing text models, allowing attackers to write out-of-bounds memory during SHAP prediction. Attackers can craft malicious model files with invalid node references that trigger out-of-