VulnSocial

CVE-2026-58659Patch(lightningai / pytorch_lightning)

LOWCVSS 8.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch lightningai pytorch_lightning systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called.

lightningai CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Weakness type (CWE)
CWE-470

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • pytorch_lightning

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
lightningai
Products
pytorch_lightning

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-20: 1Patch / Workaround · 2026-07-20: 1Technical Details · 2026-07-20: 107-20
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • VulniPulse@vulnipulse
    Patch

    ⚠️ Linux Red Hat AI Inference Server alert: CVE-2026-58659 (CVSS 7.8) Local attackers could execute arbitrary code. Upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/linux-cve-2026-58659 #Linux #RedHatAIInferenceServer #RCE #CyberSecurity #CVE

    Post summary

    The tweet alerts to CVE‑2026‑58659 with CVSS 7.8, a local code‑execution flaw in Red Hat AI Inference Server, and urges users to upgrade to the vendor‑fixed release.

    0000034
    6 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Applightningaipytorch_lightning-python-

Explore more

Back to dashboardlightningai CVEspytorch_lightning vulnerabilities