Lightning-AI

Products

ProductCVEsExploitedLatest
lightning-ai/pytorch-lightning4–Mar 20, 2025
pytorch-lightning2–Jul 15, 2026

Exploited and recent CVEs

  • CVE-2026-58659 High 7.8 PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameter 0.6%
  • CVE-2026-44484 Critical 9.8 Compromise of PyTorch Lightning PyPi Package Versions 0.4%
  • CVE-2024-8020 High 7.5 Denial of Service in lightning-ai/pytorch-lightning 0.6%
  • CVE-2024-8019 Critical 9.1 Arbitrary File Write/Overwrite in lightning-ai/pytorch-lightning 1.1%
  • CVE-2024-5980 Critical 9.1 Arbitrary File Write via /v1/runs API endpoint in lightning-ai/pytorch-lightning 1.3%
  • CVE-2024-5452 Critical 9.8 RCE via Property/Class Pollution in lightning-ai/pytorch-lightning 26.8%