📂 Vulnerable Library - pytorch_lightning-2.6.5-py3-none-any.whl
PyTorch Lightning is the lightweight PyTorch wrapper for ML researchers. Scale your models. Write less boilerplate.
Library home page: https://files.pythonhosted.org/packages/8b/4d/5740c27110b83634d8491c3b5facf0111b3e554c3164f4fb953be9bddaf6/pytorch_lightning-2.6.5-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/pytorch_lightning-2.6.5.dist-info
Findings
| Finding |
Severity |
🎯 CVSS |
Exploit Maturity |
EPSS |
Library |
Type |
Fixed in |
Remediation Available |
Reachability |
| CVE-2026-58659 |
🔴 High |
7.8 |
Not Defined |
< 1% |
pytorch_lightning-2.6.5-py3-none-any.whl |
Direct |
N/A |
❌ |
 Reachable |
Details
🔴CVE-2026-58659
Vulnerable Library - pytorch_lightning-2.6.5-py3-none-any.whl
PyTorch Lightning is the lightweight PyTorch wrapper for ML researchers. Scale your models. Write less boilerplate.
Library home page: https://files.pythonhosted.org/packages/8b/4d/5740c27110b83634d8491c3b5facf0111b3e554c3164f4fb953be9bddaf6/pytorch_lightning-2.6.5-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/pytorch_lightning-2.6.5.dist-info
Dependency Hierarchy:
- ❌ pytorch_lightning-2.6.5-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/safe.py (Application)
-> ❌ pytorch-lightning-2.6.5/pytorch_lightning/callbacks/model_checkpoint.py (Vulnerable Component)
Vulnerability Details
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called.
Publish Date: Jul 15, 2026 05:02 PM
URL: CVE-2026-58659
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
📂 Vulnerable Library - pytorch_lightning-2.6.5-py3-none-any.whl
PyTorch Lightning is the lightweight PyTorch wrapper for ML researchers. Scale your models. Write less boilerplate.
Library home page: https://files.pythonhosted.org/packages/8b/4d/5740c27110b83634d8491c3b5facf0111b3e554c3164f4fb953be9bddaf6/pytorch_lightning-2.6.5-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/pytorch_lightning-2.6.5.dist-info
Findings
Details
🔴CVE-2026-58659
Vulnerable Library - pytorch_lightning-2.6.5-py3-none-any.whl
PyTorch Lightning is the lightweight PyTorch wrapper for ML researchers. Scale your models. Write less boilerplate.
Library home page: https://files.pythonhosted.org/packages/8b/4d/5740c27110b83634d8491c3b5facf0111b3e554c3164f4fb953be9bddaf6/pytorch_lightning-2.6.5-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/pytorch_lightning-2.6.5.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called.
Publish Date: Jul 15, 2026 05:02 PM
URL: CVE-2026-58659
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :