Lightningai
2 CVEs across 1 Lightningai products. Browse Lightningai vulnerabilities, severities, and proof-of-concept exploits.
Lightningai products with known CVEs
Lightningai CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-58659 | High | 7.8 | 2026-07-15 | PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes… |
CVE-2026-44484 | Critical | 9.8 | 2026-05-14 | PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a cre… |
CVE-2026-31221 | High | 7.8 | 2026-05-12 | PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModu… |
CVE-2024-8020 | High | 7.5 | 2025-03-20 | A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the `/… |
CVE-2024-8019 | Critical | 9.1 | 2025-03-20 | In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the `LightningApp` when running on a Windows host. The vulnerability occurs at the `… |
CVE-2024-5980 | Critical | 9.8 | 2024-06-27 | A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files… |
CVE-2024-5452 | Critical | 9.8 | 2024-06-06 | A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user in… |
CVE-2022-0845 | Critical | 9.8 | 2022-03-05 | Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0. |
CVE-2021-4118 | High | 7.8 | 2021-12-23 | pytorch-lightning is vulnerable to Deserialization of Untrusted Data |