{"schema":"threatline.record/2","record":{"id":"CVE-2026-58659","aliases":["GHSA-qqmf-gpg7-g8gw","PYSEC-2026-3624","PYSEC-2026-3967"],"summary":" PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters","details":"PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called.","categories":["Libraries & packages"],"product":"lightning","vendor":"Lightning-AI","ecosystem":"pip","affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-qqmf-gpg7-g8gw","source_modified_at":"2026-09-24T15:39:50Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"pip","name":"lightning"},"range":"< 2.6.6"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58659","source_modified_at":"2026-10-08T15:23:31.352Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"pytorch-lightning","vendor":"Lightning-AI","versions":[{"version":"0","status":"affected","versionType":"semver","lessThanOrEqual":"2.6.5"},{"status":"unaffected","version":"d710d689510d50e800f53b3cd773cbca20b1f86f","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-qqmf-gpg7-g8gw","source_modified_at":"2026-09-24T15:45:09.719284514Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"PyPI","name":"lightning","purl":"pkg:pypi/lightning"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.6.6"}],"type":"ECOSYSTEM"}],"versions":["1.8.0","1.8.0.post1","1.8.0rc1","1.8.0rc2","1.8.1","1.8.2","1.8.3","1.8.3.post0","1.8.3.post1","1.8.3.post2","1.8.4","1.8.4.post0","1.8.5","1.8.5.post0","1.8.6","1.9.0","1.9.0rc0","1.9.1","1.9.2","1.9.3","1.9.4","1.9.5","2.0.0","2.0.0rc0","2.0.1","2.0.1.post0","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.0.9","2.0.9.post0","2.1.0","2.1.0rc0","2.1.0rc1","2.1.1","2.1.2","2.1.3","2.1.4","2.2.0","2.2.0.post0","2.2.0rc0","2.2.1","2.2.2","2.2.3","2.2.4","2.2.5"]}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-qqmf-gpg7-g8gw","source_modified_at":"2026-09-24T15:39:50Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"pip","name":"lightning"},"version":"2.6.6"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-qqmf-gpg7-g8gw","source_modified_at":"2026-09-24T15:45:09.719284514Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"PyPI","name":"lightning","purl":"pkg:pypi/lightning"},"version":"2.6.6"}],"cvss":8.4,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00626,"percentile":0.49382,"score_date":"2026-10-23"},"published_at":"2026-07-15T17:02:40.640Z","modified_at":"2026-10-08T15:23:31.352Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/advisories/GHSA-qqmf-gpg7-g8gw","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-09-24T15:39:50Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-58659","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-08T15:23:31.352Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-qqmf-gpg7-g8gw","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-09-24T15:45:09.719284514Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-58659","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["GitHub Advisory Database","CVE List","OSV","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58659","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://github.com/Lightning-AI/pytorch-lightning/issues/21822","tags":["technical-description","exploit"]},{"source":"CVE List","url":"https://github.com/Lightning-AI/pytorch-lightning/pull/21832","tags":["issue-tracking"]},{"source":"CVE List","url":"https://github.com/Lightning-AI/pytorch-lightning/commit/d710d689510d50e800f53b3cd773cbca20b1f86f","tags":["patch"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/pytorch-lightning-arbitrary-code-execution-via-instantiator-hyperparameter","tags":["third-party-advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/lightning/PYSEC-2026-3624.yaml","source":"GitHub Advisory Database"},{"url":"https://github.com/Lightning-AI/pytorch-lightning/releases/tag/2.6.6","source":"GitHub Advisory Database"},{"url":"https://github.com/advisories/GHSA-qqmf-gpg7-g8gw","source":"GitHub Advisory Database"},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/pytorch-lightning/PYSEC-2026-3967.yaml","source":"GitHub Advisory Database"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","ssvc":{"exploitation":"poc","automatable":"no","technical_impact":"total","assessed_at":"2026-07-18T01:02:53.086792Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-08T15:23:31.352Z","content_hash":"e13f750aedc7304581503c8d53e111371be985ad3fde73095f5369ac3d5d7a9b"}}