lightningai records

9 published records for vendor lightningai.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 4
With a fix record: 77.8%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
47Plan	CVE-2024-5452Proof of concept	RCE via Property/Class Pollution in lightning-ai/pytorch-lightninglightningai · pytorch lightning · CWE-915 pre-auth RCE Deserialization	Critical9.8	—	26.8%	Jun 6, 2024
39Monitor	CVE-2024-5980No exploit	Arbitrary File Write via /v1/runs API endpoint in lightning-ai/pytorch-lightninglightningai · pytorch lightning · CWE-22 pre-auth RCE Path traversal	Critical9.8	—	1.3%	Jun 27, 2024
39Monitor	CVE-2022-0845No exploit	Code Injection in pytorchlightning/pytorch-lightninglightningai · pytorch lightning · CWE-94 pre-auth RCE	Critical9.8	—	1.0%	Mar 5, 2022
37Monitor	CVE-2026-44484No exploit	Compromise of PyTorch Lightning PyPi Package Versionslightningai · pytorch lightning · CWE-506 Pre-auth	Critical9.3	—	0.7%	May 14, 2026
36Monitor	CVE-2024-8019No exploit	Arbitrary File Write/Overwrite in lightning-ai/pytorch-lightninglightningai · pytorch lightning · CWE-434 pre-auth RCE File upload	Critical9.1	—	1.1%	Mar 20, 2025
33Monitor	CVE-2026-58659No exploit	PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameterlightningai · pytorch lightning · CWE-470 RCE	High8.4	—	0.6%	Jul 15, 2026
31Monitor	CVE-2021-4118No exploit	Deserialization of Untrusted Data in pytorchlightning/pytorch-lightninglightningai · pytorch lightning · CWE-502 Deserialization	High7.8	—	1.0%	Dec 23, 2021
31Monitor	CVE-2026-31221No exploit	PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanismlightningai · pytorch lightning · CWE-502 RCE Deserialization	High7.8	—	0.6%	May 12, 2026
30Monitor	CVE-2024-8020No exploit	Denial of Service in lightning-ai/pytorch-lightninglightningai · pytorch lightning · CWE-248 Pre-auth Denial of service	High7.5	—	0.6%	Mar 20, 2025

CVE-2024-5452
47Plan
RCE via Property/Class Pollution in lightning-ai/pytorch-lightning
CriticalCVSS 9.8Proof of conceptEPSS 27%
- pre-auth RCE
- Deserialization
lightningai · pytorch lightningJun 6, 2024
CVE-2024-5980
39Monitor
Arbitrary File Write via /v1/runs API endpoint in lightning-ai/pytorch-lightning
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Path traversal
lightningai · pytorch lightningJun 27, 2024
CVE-2022-0845
39Monitor
Code Injection in pytorchlightning/pytorch-lightning
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
lightningai · pytorch lightningMar 5, 2022
CVE-2026-44484
37Monitor
Compromise of PyTorch Lightning PyPi Package Versions
CriticalCVSS 9.3No exploitEPSS 1%
- Pre-auth
lightningai · pytorch lightningMay 14, 2026
CVE-2024-8019
36Monitor
Arbitrary File Write/Overwrite in lightning-ai/pytorch-lightning
CriticalCVSS 9.1No exploitEPSS 1%
- pre-auth RCE
- File upload
lightningai · pytorch lightningMar 20, 2025
CVE-2026-58659
33Monitor
PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameter
HighCVSS 8.4No exploitEPSS 1%
- RCE
lightningai · pytorch lightningJul 15, 2026
CVE-2021-4118
31Monitor
Deserialization of Untrusted Data in pytorchlightning/pytorch-lightning
HighCVSS 7.8No exploitEPSS 1%
- Deserialization
lightningai · pytorch lightningDec 23, 2021
CVE-2026-31221
31Monitor
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism
HighCVSS 7.8No exploitEPSS 1%
- RCE
- Deserialization
lightningai · pytorch lightningMay 12, 2026
CVE-2024-8020
30Monitor
Denial of Service in lightning-ai/pytorch-lightning
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
lightningai · pytorch lightningMar 20, 2025