Veille CVE

Recherche « Lightning-AI pytorch-lightning »

2 CVE

Critique 1 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Lightning-AI pytorch-lightning » ✕
  1. CVE-2026-58659 7.8 Élevée

    Lightning-AI pytorch-lightning · Lightningai pytorch lightning

    PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called.

  2. CVE-2026-44484 9.8 Critique

    Lightning-AI pytorch-lightning · Red Hat AI Inference Server · Red Hat Enterprise Linux AI (RHEL AI) 3 · Red Hat OpenShift AI (RHOAI)

    PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting mechanism.