CVE-2026-44484
9.8 CRITICALPyTorch Lightning is a deep learning framework to pretrain and finetune AI models
Published: 2026-05-14 · Last updated: 2026-05-21
Severity and scoring
- CVSS
- 9.8 CRITICAL
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CWE
- CWE-506
Affected products
| Vendor | Product |
|---|---|
| lightningai | pytorch_lightning |
Description
PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting mechanism.
Source: NVD
References
Related CVEs
Same CWE
- CVE-2026-45758 — Guardrails AI is a Python framework that helps build AI applications (9.6 CRITICAL)
- CVE-2026-48027 — Nx Console is the user interface for Nx & Lerna (9.8 CRITICAL)
- CVE-2026-8398 — A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.24... (9.8 CRITICAL)
- CVE-2026-45321 — On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm ... (9.6 CRITICAL)