彙總 lightningai 相關全部產品的 CVE 與安全漏洞情報，包括 CVSS、EPSS、公開時間與漏洞情報資料。
歷史漏洞主要涉及 檔案包含與路徑處理缺陷 等問題，部分漏洞可能導致 未授權存取，並影響 生產負載與軟體部署 相關場景。
相關漏洞資料主要來源於公開漏洞披露與安全公告，可用於評估歷史漏洞暴露面與修補優先順序。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2026-44484 | PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting mechanism. | [email protected] | 9.3 | 0.39% | 2026-05-14 | 2026-06-29 |
| CVE-2026-31221 | PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a malici | [email protected] | 7.8 | 0.39% | 2026-05-12 | 2026-06-17 |
| CVE-2024-8020 | A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the `/api/v1/state` endpoint of `LightningApp`. This issue occurs due to improper handling of unexpected state values, which results in the server shutting down. | [email protected] | 7.5 | 0.55% | 2025-03-20 | 2026-06-17 |
| CVE-2024-8019 | In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the `LightningApp` when running on a Windows host. The vulnerability occurs at the `/api/v1/upload_file/` endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to potential remote code execution (RCE) by overwriting critical files or placing malicious files in sensitive locations. | [email protected] | 9.1 | 0.96% | 2025-03-20 | 2026-06-17 |
| CVE-2024-5980 | A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. | [email protected] | 9.8 | 1.31% | 2024-06-27 | 2026-06-17 |
| CVE-2024-5452 | A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the `deepdiff` library. The library uses `deepdiff.Delta` objects to modify application state based on frontend actions. However, it is possible to bypass the intended restrictions on modifying dunder attributes, allowing an attacker to construct a serialized delta that passes the deserializer | [email protected] | 9.8 | 26.49% | 2024-06-06 | 2026-06-17 |
| CVE-2022-0845 | Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0. | [email protected] | 9.8 | 0.96% | 2022-03-05 | 2026-06-17 |
| CVE-2021-4118 | pytorch-lightning is vulnerable to Deserialization of Untrusted Data | [email protected] | 7.8 | 0.98% | 2021-12-23 | 2026-06-17 |