Description
PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting mechanism.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lightning-AI | pytorch-lightning | 2.6.2, 2.6.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | lightning | >= 2.6.2, < 2.6.4 | 2.6.4 | PYSEC-2026-3973 |
| PyPI | pytorch-lightning | 2.6.2 | — | GHSA-w37p-236h-pfx3 |
| PyPI | pytorch-lightning | 2.6.3 | — | GHSA-w37p-236h-pfx3 |
| PyPI | pytorch-lightning | >= 2.6.2, < 2.6.4 | 2.6.4 | PYSEC-2026-508 |