lightning
The Deep Learning framework to train, deploy, and ship AI products Lightning fast.
Activity
- Latest release
- 4d ago
- Total releases
- 74
- Cadence
- ~14 days
- Last 12 months
- 7
Details
- License
- Apache-2.0
- First release
- Oct 27, 2022
| Version | Released | |
|---|---|---|
2.6.6
patch
1 CVE
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.6.5
patch
1 CVE
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.6.4
patch
1 CVE
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.6.1
patch
1 CVE
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.6.0
minor
2 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.5.6
patch
2 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.6.0.dev0
pre
2 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.5.5
patch
2 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.5.4
patch
2 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.5.3
patch
2 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.5.2
patch
2 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.5.1.post0
pre
2 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.5.1
patch
2 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.5.1rc2
pre
2 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.5.1rc1
pre
2 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.5.1rc0
pre
2 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.5.0.post0
pre
2 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.5.0
minor
2 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.5.0rc0
pre
2 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.4.0
minor
2 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.3.3
patch
3 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.3.2
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.3.1
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.3.0
minor
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.2.5
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.2.4
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.2.3
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.2.2
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.2.1
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.2.0.post0
pre
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.2.0
minor
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.2.0rc0
pre
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.1.4
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.1.3
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.1.2
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.1.1
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.1.0
minor
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.1.0rc1
pre
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.0.9.post0
pre
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.0.9
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.0.8
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.1.0rc0
pre
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.0.7
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.0.6
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.0.5
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.0.4
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.0.3
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.0.2
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.9.5
patch
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
2.0.1.post0
pre
6 CVEs
CVE-2026-31221
PYSEC-2026-3972
GHSA-75m9-98v2-hjpm
PYSEC-2026-3043
Sep 10, 2026
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
7.8
/ 10
High
Local
Low
None
Required
Unchanged
High
High
High
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded. Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 304 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8020
PYSEC-2026-3971
GHSA-98fp-7v67-4v3q
PYSEC-2026-1857
Sep 10, 2026
PyTorch Lightning denial of service vulnerability
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 205 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-8019
PYSEC-2026-3970
GHSA-4cv3-v7pv-rfhf
PYSEC-2026-507
Sep 10, 2026
PyTorch Lightning path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the Affected versions
0.0.2
0.10.0
0.2
0.2.2
0.2.3
0.2.4
0.2.4.1
0.2.5
0.2.5.1
0.2.5.2
0.2.6
0.3
+ 223 more Show less
0.3.1
0.3.2
0.3.3
0.3.4
0.3.4.1
0.3.5
0.3.6
0.3.6.1
0.3.6.3
0.3.6.4
0.3.6.5
0.3.6.6
0.3.6.7
0.3.6.8
0.3.6.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.5.0
0.5.1
0.5.1.2
0.5.1.3
0.5.2
0.5.2.1
0.5.3
0.5.3.1
0.5.3.2
0.5.3.3
0.6.0
0.7.1
0.7.3
0.7.5
0.7.6
0.8.1
0.8.3
0.8.4
0.8.5
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.2.0
1.2.0rc0
1.2.0rc1
1.2.0rc2
1.2.1
1.2.10
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.0rc1
1.3.0rc2
1.3.0rc3
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.7.post0
1.3.8
1.4.0
1.4.0rc0
1.4.0rc1
1.4.0rc2
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.0rc0
1.5.0rc1
1.5.1
1.5.10
1.5.10.post0
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.0rc0
1.6.0rc1
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post0
1.7.0
1.7.0rc0
1.7.0rc1
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.8.0
1.8.0.post1
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
Fixed in
2.4.0
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-58659
GHSA-qqmf-gpg7-g8gw
PYSEC-2026-3624
PYSEC-2026-3967
Jul 15, 2026
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
High
Local
Low
None
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 159 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0.dev20240630
2.4.0.dev20240707
2.4.0.dev20240714
2.4.0.dev20240721
2.4.0.dev20240728
2.4.0.dev20240804
2.4.0.dev20240811
2.4.0.dev20240818
2.4.0.dev20240825
2.4.0.dev20240901
2.4.0.dev20240908
2.4.0.dev20240915
2.4.0.dev20240922
2.4.0.dev20240929
2.4.0.dev20241006
2.4.0.dev20241013
2.4.0.dev20241020
2.5.0
2.5.0.dev20241027
2.5.0.dev20241103
2.5.0.dev20241110
2.5.0.dev20241117
2.5.0.dev20241124
2.5.0.dev20241201
2.5.0.dev20241208
2.5.0.dev20241215
2.5.0.dev20241222
2.5.0.dev20241229
2.5.0.dev20250105
2.5.0.dev20250112
2.5.0.dev20250119
2.5.0.dev20250126
2.5.0.dev20250202
2.5.0.dev20250209
2.5.0.dev20250216
2.5.0.dev20250223
2.5.0.dev20250302
2.5.0.dev20250309
2.5.0.dev20250316
2.5.0.post0
2.5.0rc0
2.5.1
2.5.1.dev20250323
2.5.1.dev20250330
2.5.1.dev20250406
2.5.1.dev20250413
2.5.1.dev20250420
2.5.1.dev20250427
2.5.1.dev20250504
2.5.1.dev20250511
2.5.1.dev20250518
2.5.1.dev20250525
2.5.1.dev20250601
2.5.1.dev20250608
2.5.1.dev20250615
2.5.1.dev20250622
2.5.1.post0
2.5.1rc0
2.5.1rc1
2.5.1rc2
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
2.6.0
2.6.0.dev0
2.6.0.dev20250629
2.6.0.dev20250706
2.6.0.dev20250713
2.6.0.dev20250720
2.6.0.dev20250727
2.6.0.dev20250803
2.6.0.dev20250810
2.6.0.dev20250817
2.6.0.dev20250824
2.6.0.dev20250831
2.6.0.dev20250914
2.6.0.dev20250921
2.6.0.dev20250928
2.6.0.dev20251005
2.6.0.dev20251012
2.6.0.dev20251019
2.6.0.dev20251026
2.6.0.dev20251102
2.6.0.dev20251109
2.6.0.dev20251116
2.6.0.dev20251123
2.6.0.dev20251130
2.6.0.dev20251207
2.6.0.dev20251214
2.6.0.dev20251221
2.6.0.dev20251228
2.6.0.dev20260104
2.6.0.dev20260111
2.6.0.dev20260118
2.6.0.dev20260125
2.6.1
2.6.1.dev20260201
2.6.4
2.6.5
Fixed in
2022.6.15
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5452
PYSEC-2026-385
GHSA-cgwc-qvrx-rf7f
PYSEC-2026-3974
Jun 29, 2026
Remote code execution in pytorch lightning
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2024-5980
PYSEC-2026-386
GHSA-mr7h-w2qc-ffc2
PYSEC-2026-3975
Jun 29, 2026
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. Affected versions
1.8.0
1.8.0.post1
1.8.0rc1
1.8.0rc2
1.8.1
1.8.2
1.8.3
1.8.3.post0
1.8.3.post1
1.8.3.post2
1.8.4
1.8.4.post0
+ 56 more Show less
1.8.5
1.8.5.post0
1.8.6
1.9.0
1.9.0rc0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
2.0.0
2.0.0rc0
2.0.1
2.0.1.post0
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.9.post0
2.1.0
2.1.0rc0
2.1.0rc1
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.0.post0
2.2.0rc0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.0.dev20240318
2.3.0.dev20240324
2.3.0.dev20240328
2.3.0.dev20240331
2.3.0.dev20240407
2.3.0.dev20240414
2.3.0.dev20240421
2.3.0.dev20240428
2.3.0.dev20240505
2.3.0.dev20240519
2.3.0.dev20240526
2.3.0.dev20240602
2.3.0.dev20240609
2.3.0.dev20240616
2.3.0.dev20240623
2.3.1
2.3.2
Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev |