9.3
Critical
CVE-2026-44484 PyTorch Lightning is a deep learning framework to pretrain and finetune AI models
Description
PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting mechanism.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| pytorch-lightning 2.6 | 2.6.2 → 2.6.3 | No fix stated |
| Red Hat AI Inference Server | Versions not published | |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Versions not published | |
| Red Hat OpenShift AI (RHOAI) | Versions not published |
References
- github.com github.com
Timeline
- Published
- Last modified