本ページは lightningai pytorch_lightning に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2026-44484 | PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting mechanism. | [email protected] | 9.3 | 0.06% | 2026-05-14 | 2026-05-21 |
| CVE-2026-31221 | PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a malici | [email protected] | 7.8 | 0.23% | 2026-05-12 | 2026-05-15 |
| CVE-2024-8020 | A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the `/api/v1/state` endpoint of `LightningApp`. This issue occurs due to improper handling of unexpected state values, which results in the server shutting down. | [email protected] | 7.5 | 0.22% | 2025-03-20 | 2025-10-15 |
| CVE-2024-8019 | In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the `LightningApp` when running on a Windows host. The vulnerability occurs at the `/api/v1/upload_file/` endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to potential remote code execution (RCE) by overwriting critical files or placing malicious files in sensitive locations. | [email protected] | 9.1 | 2.10% | 2025-03-20 | 2025-08-01 |
| CVE-2024-5980 | A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. | [email protected] | 9.8 | 10.73% | 2024-06-27 | 2025-10-15 |
| CVE-2024-5452 | A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the `deepdiff` library. The library uses `deepdiff.Delta` objects to modify application state based on frontend actions. However, it is possible to bypass the intended restrictions on modifying dunder attributes, allowing an attacker to construct a serialized delta that passes the deserializer | [email protected] | 9.8 | 50.54% | 2024-06-06 | 2025-10-15 |
| CVE-2022-0845 | Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0. | [email protected] | 9.8 | 0.27% | 2022-03-05 | 2024-11-21 |
| CVE-2021-4118 | pytorch-lightning is vulnerable to Deserialization of Untrusted Data | [email protected] | 7.8 | 0.26% | 2021-12-23 | 2024-11-21 |