pytorch-lightning vulnerabilities

2 known vulnerabilities in pytorch-lightning from Lightning-ai. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  pytorch-lightning: Use of Externally-Controlled Input to Select Classes or Code

  CVE-2026-58659Jul 15, 2026Lightning-ai

  PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft m

• 9.8 Critical severity

  pytorch-lightning: Embedded Malicious Code

  CVE-2026-44484May 14, 2026Lightning-ai

  PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting mechanism.