Skip to content
OpenAdvisories

Vendor

lightgbm-org

1 known vulnerabilities.

Products

LightGBM 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-92786

    LightGBM through 4.7.0 Out-of-Bounds Write via Crafted Model

    LightGBM through 4.7.0 fails to validate child and split array values when parsing text models, allowing attackers to write out-of-bounds memory during SHAP prediction. Attackers can craft malicious model files with invalid node references that trigger out-of…

    lightgbm-org LightGBM