Skip to content
Threat Feed
Subscribe

Product

PyTorch Lightning (Through 2.6.5)

1 brief RSS
high advisory

Remote Code Execution Vulnerability in PyTorch Lightning via Malicious Checkpoint Files (CVE-2026-58659)

A remote code execution vulnerability, CVE-2026-58659, exists in PyTorch Lightning through version 2.6.5, allowing attackers to craft malicious checkpoint files that execute arbitrary code by exploiting a flaw in the `_load_state` function when `LightningModule.load_from_checkpoint` is called.

PyTorch Lightning remote-code-execution vulnerability python pytorch
1t 1c 1i