All vulnerabilities
CVE-2026-58659GHSA-qqmf-gpg7-g8gwPYSEC-2026-3624PYSEC-2026-3967

PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters

Lightning-AI lightningpipLibraries & packages
Open in ThreatlineRecord JSON
CVSS
8.4High
ExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 18 Jul 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.63%Chance of exploitation activity in the next 30 days, higher than 49% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in2.6.6Fixed versionGitHub
Published15 Jul 2026Updated 8 Oct 2026CVE List

What fixes it

  • 2.6.6lightning, pipGitHub
  • 2.6.6lightning, PyPIOSVpip install "lightning>=2.6.6"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called.

Text from CVE List

Affected versions 54

  • lightning, pip< 2.6.6GitHub
  • pytorch-lightningaffected: all versions through 2.6.5CVE List
  • pytorch-lightningunaffected: d710d689510d50e800f53b3cd773cbca20b1f86fCVE List
  • lightning, PyPIfrom first release, fixed in 2.6.6OSV
  • lightning, PyPI1.8.0OSV
  • lightning, PyPI1.8.0.post1OSV
  • lightning, PyPI1.8.0rc1OSV
  • lightning, PyPI1.8.0rc2OSV
  • lightning, PyPI1.8.1OSV
  • lightning, PyPI1.8.2OSV
  • lightning, PyPI1.8.3OSV
  • lightning, PyPI1.8.3.post0OSV
  • lightning, PyPI1.8.3.post1OSV
  • lightning, PyPI1.8.3.post2OSV
  • lightning, PyPI1.8.4OSV
  • lightning, PyPI1.8.4.post0OSV
  • lightning, PyPI1.8.5OSV
  • lightning, PyPI1.8.5.post0OSV
  • lightning, PyPI1.8.6OSV
  • lightning, PyPI1.9.0OSV
  • lightning, PyPI1.9.0rc0OSV
  • lightning, PyPI1.9.1OSV
  • lightning, PyPI1.9.2OSV
  • lightning, PyPI1.9.3OSV
  • lightning, PyPI1.9.4OSV
  • lightning, PyPI1.9.5OSV
  • lightning, PyPI2.0.0OSV
  • lightning, PyPI2.0.0rc0OSV
  • lightning, PyPI2.0.1OSV
  • lightning, PyPI2.0.1.post0OSV
  • lightning, PyPI2.0.2OSV
  • lightning, PyPI2.0.3OSV
  • lightning, PyPI2.0.4OSV
  • lightning, PyPI2.0.5OSV
  • lightning, PyPI2.0.6OSV
  • lightning, PyPI2.0.7OSV
  • lightning, PyPI2.0.8OSV
  • lightning, PyPI2.0.9OSV
  • lightning, PyPI2.0.9.post0OSV
  • lightning, PyPI2.1.0OSV
  • lightning, PyPI2.1.0rc0OSV
  • lightning, PyPI2.1.0rc1OSV
  • lightning, PyPI2.1.1OSV
  • lightning, PyPI2.1.2OSV
  • lightning, PyPI2.1.3OSV
  • lightning, PyPI2.1.4OSV
  • lightning, PyPI2.2.0OSV
  • lightning, PyPI2.2.0.post0OSV
  • lightning, PyPI2.2.0rc0OSV
  • lightning, PyPI2.2.1OSV
  • lightning, PyPI2.2.2OSV
  • lightning, PyPI2.2.3OSV
  • lightning, PyPI2.2.4OSV
  • lightning, PyPI2.2.5OSV

References 9