CVE-2026-44484

Fixed upstream EPSS <1%CVSS 9.3

PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting mechanism.

Published 2026-05-14 · CVE record · OSV

Products: Lightning-AI pytorch-lightning, Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI)

Fixed upstream