CVE-2026-44484 Compromise of PyTorch Lightning PyPi Package Versions
Attackers can harvest credentials via malicious code in compromised PyTorch Lightning PyPI packages, affecting AI developers using the library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-44484?
CVE-2026-44484 is a critical vulnerability in Lightning-AI pytorch-lightning, published on 14 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting mechanism.
Which versions are affected by CVE-2026-44484?
4 open source packages ship an affected version, including pytorch-lightning and lightning. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
pytorch-lightning PyPI | All versions | None |
pytorch-lightning PyPI | All versions | None |
pytorch-lightning PyPI | From 2.6.2 | 2.6.4 |
lightning PyPI | From 2.6.2 | 2.6.4 |
Products include Lightningai Pytorch Lightning.
How do I fix CVE-2026-44484?
Upgrade pytorch-lightning to 2.6.4 or later.
Is CVE-2026-44484 being exploited?
There is no known exploitation of CVE-2026-44484 in the wild and no public exploit code.
Other vulnerabilities in Lightning-AI pytorch-lightning
- CVE-2024-5452 RCE via Property/Class Pollution in lightning-ai/pytorch-lightning
- CVE-2024-8019 Arbitrary File Write/Overwrite in lightning-ai/pytorch-lightning
- CVE-2024-5980 Arbitrary File Write via /v1/runs API endpoint in lightning-ai/pytorch-lightning
- CVE-2026-31221 PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
- CVE-2026-58659 PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameter
Sources
Also known as GHSA-w37p-236h-pfx3, PYSEC-2026-3973, PYSEC-2026-508.