Skip to content
OpenAdvisories

Vendor

Lightning-AI

6 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.8

    PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameter

    PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft …

  • High 7.5

    Denial of Service in lightning-ai/pytorch-lightning

    A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the `/api/v1/state` endpoint of `LightningApp`. This issue occurs due to improper handling of unexpected s…