Critical severity9.8GHSA Advisory· Published May 14, 2026· Updated Jul 15, 2026
CVE-2026-44484
CVE-2026-44484
Description
PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting mechanism.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Range: = 2.6.3
cpe:2.3:a:lightningai:pytorch_lightning:2.6.2:*:*:*:*:python:*:*+ 1 more
- cpe:2.3:a:lightningai:pytorch_lightning:2.6.2:*:*:*:*:python:*:*
- cpe:2.3:a:lightningai:pytorch_lightning:2.6.3:*:*:*:*:python:*:*
- ghsa-coords
Patches
Vulnerability mechanics
References
6- github.com/Lightning-AI/pytorch-lightning/security/advisories/GHSA-w37p-236h-pfx3nvdMitigationVendor AdvisoryWEB
- github.com/advisories/GHSA-w37p-236h-pfx3ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-44484ghsaADVISORY
- access.redhat.com/security/cve/CVE-2026-44484nvd
- bugzilla.redhat.com/show_bug.cginvd
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44484.jsonnvd
News mentions
0No linked articles in our index yet.