Skip to content
OpenAdvisories

Product · Lightning-AI

pytorch-lightning

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-58659

    PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameter

    PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft …

    Lightning-AI pytorch-lightning lightning pytorch-lightning PyPI