← All advisories

High severity8.1NVD Advisory· Published Nov 12, 2024· Updated Jun 17, 2026

CVE-2024-43598

CVE-2024-43598

Description

LightGBM Remote Code Execution Vulnerability

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
lightgbmPyPI	>= 1.0.0, < 4.6.0	4.6.0

Affected products

3

Microsoft/Lightgbm
cpe:2.3:a:microsoft:lightgbm:*:*:*:*:*:*:*:*
Range: <4.6.0
ghsa-coords
pkg:pypi/lightgbm
Range: >= 1.0.0, < 4.6.0
Microsoft/LightGBMv5
Range: 1.0.0

Patches

Vulnerability mechanics

References

4

msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43598nvdPatchVendor AdvisoryWEB
github.com/advisories/GHSA-2586-f3p4-hq84ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-43598ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/lightgbm/PYSEC-2024-231.yamlghsaWEB

News mentions

0

No linked articles in our index yet.