Vulnerabilities for pytorch-lightning

First version without a known vulnerability: 2.6.6

Details

• PYSEC-2026-39752026-09-10

  pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint

  Fixed in: 2.3.3

• PYSEC-2026-39742026-09-10

  Remote code execution in pytorch lightning

  Fixed in: 2.3.3

• PYSEC-2026-39672026-07-15

  PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called.

  Fixed in: 2.6.6

• GHSA-75m9-98v2-hjpm2026-05-12

  PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization

• GHSA-w37p-236h-pfx32026-05-07

  Compromise of PyTorch Lightning PyPi Package Versions

  Fixed in: 2.6.4

• GHSA-98fp-7v67-4v3q2025-03-20

  PyTorch Lightning denial of service vulnerability

• GHSA-4cv3-v7pv-rfhf2025-03-20

  PyTorch Lightning path traversal vulnerability

  Fixed in: 2.4.0

• GHSA-r5qj-cvf9-p85h2022-03-06

  Code Injection in PyTorch Lightning

  Fixed in: 1.6.0, 8b7a12c52e52a06408e9231647839ddb4665e8ae

• GHSA-2vj5-px25-gjrp2022-01-06

  pytorch-lightning is vulnerable to Deserialization of Untrusted Data

  Fixed in: 1.6.0, 62f1e82e032eb16565e676d39e0db0cac7e34ace