CVE-2026-44484
Compromise of PyTorch Lightning PyPi Package Versions
CVSS Score
9.8
EPSS Score
0.0%
EPSS Percentile
0th
PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting mechanism.
| CWE | CWE-506 |
| Vendor | lightning-ai |
| Product | pytorch-lightning |
| Published | May 14, 2026 |
| Last Updated | Jul 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for lightning-ai pytorch-lightning
Be the first to know when new critical vulnerabilities affecting lightning-ai pytorch-lightning are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Lightning-AI / pytorch-lightning
2.6.2 2.6.3
References
github.com: https://github.com/Lightning-AI/pytorch-lightning/security/advisories/GHSA-w37p-236h-pfx3 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-44484 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2477476 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44484.json