Lightning-AI
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| lightning-ai/pytorch-lightning | 4 | – | Mar 20, 2025 |
| pytorch-lightning | 2 | – | Jul 15, 2026 |
Exploited and recent CVEs
- CVE-2026-58659 PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameter 0.6%
- CVE-2026-44484 Compromise of PyTorch Lightning PyPi Package Versions 0.4%
- CVE-2024-8020 Denial of Service in lightning-ai/pytorch-lightning 0.6%
- CVE-2024-8019 Arbitrary File Write/Overwrite in lightning-ai/pytorch-lightning 1.1%
- CVE-2024-5980 Arbitrary File Write via /v1/runs API endpoint in lightning-ai/pytorch-lightning 1.3%
- CVE-2024-5452 RCE via Property/Class Pollution in lightning-ai/pytorch-lightning 26.8%