CVE-2026-44484: Lightningai Pytorch Lightning

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting mechanism.

Affected products

• Lightningai Pytorch Lightning: version 2.6.2 only; version 2.6.3 only

Published 2026-05-14. Last modified 2026-07-15.