← All advisories

High severityNVD Advisory· Published Nov 12, 2024· Updated Jul 8, 2025

LightGBM Remote Code Execution Vulnerability

CVE-2024-43598

Description

LightGBM Remote Code Execution Vulnerability

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
lightgbmPyPI	>= 1.0.0, < 4.6.0	4.6.0

Affected products

2

ghsa-coords
pkg:pypi/lightgbm
Range: >= 1.0.0, < 4.6.0
Microsoft/LightGBMv5
Range: 1.0.0

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-2586-f3p4-hq84ghsaADVISORY
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43598ghsavendor-advisoryWEB
nvd.nist.gov/vuln/detail/CVE-2024-43598ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/lightgbm/PYSEC-2024-231.yamlghsaWEB

News mentions

0

No linked articles in our index yet.