lightning-ai vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20252
3. 20262

Newest CVEs

• CVE-2026-58659

  PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameter

  Lightning-AI · pytorch-lightning

  High8.4
• CVE-2026-44484

  Compromise of PyTorch Lightning PyPi Package Versions

  Lightning-AI · pytorch-lightning

  Critical9.3
• CVE-2024-8020

  Denial of Service in lightning-ai/pytorch-lightning

  lightning-ai · lightning-ai/pytorch-lightning

  High7.5
• CVE-2024-8019

  Arbitrary File Write/Overwrite in lightning-ai/pytorch-lightning

  lightning-ai · lightning-ai/pytorch-lightning

  Critical9.1
• CVE-2024-5980

  Arbitrary File Write via /v1/runs API endpoint in lightning-ai/pytorch-lightning

  lightning-ai · lightning-ai/pytorch-lightning

  Critical9.1
• CVE-2024-5452

  RCE via Property/Class Pollution in lightning-ai/pytorch-lightning

  lightning-ai · lightning-ai/pytorch-lightning

  Critical9.8