CVE-2026-44484

Published: May 14, 2026

Modified: May 15, 2026

PUBLISHED

Description

PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting mechanism.

Vendor	Product	Versions
Lightning-AI	pytorch-lightning	affected `2.6.2` affected `2.6.3`

Weaknesses (CWE)

CWE-506

References

https://github.com/Lightning-AI/pytorch-lightning/security/advisories/GHSA-w37p-236h-pfx3

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2026-44484

Description

Affected Products

Weaknesses (CWE)

References