CVE-2026-58659: PyTorch Lightning — HIGH

Q: Is CVE-2026-58659 actively exploited?

No confirmed active exploitation of CVE-2026-58659 has been reported, but organizations should still patch proactively.

Q: How to fix CVE-2026-58659?

Update to patched version: PyTorch Lightning 2022.6.15.

Q: What is the CVSS score for CVE-2026-58659?

CVE-2026-58659 has a CVSS v3.1 base score of 7.8 (HIGH). The EPSS exploitation probability is 0.33%.

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass...

Full CISO analysis pending enrichment.

What systems are affected?

Package	Ecosystem	Vulnerable Range	Patched
PyTorch Lightning	pip	< 2022.6.15	`2022.6.15`
31.3K OpenSSF 5.9 1.7K dependents Pushed 9d ago 56% patched ~341d to patch Full package profile →
PyTorch Lightning	pip	—	No patch
31.3K OpenSSF 5.9 1.7K dependents Pushed 9d ago 56% patched ~341d to patch Full package profile →

How severe is it?

CVSS 3.1

7.8 / 10

EPSS

0.3%

chance of exploitation in 30 days

Higher than 25% of all CVEs

Source: EPSS v3 — FIRST.org

Exploitation Status

No known exploitation

Sophistication

N/A

What is the attack surface?

AV Local

AC Low

PR None

UI Required

S Unchanged

C High

I High

A High

What should I do?

Patch available

Update PyTorch Lightning to version 2022.6.15

Which compliance frameworks are affected?

Compliance analysis pending. Sign in for full compliance mapping when available.

Frequently Asked Questions

What is CVE-2026-58659?

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called.

Is CVE-2026-58659 actively exploited?

No confirmed active exploitation of CVE-2026-58659 has been reported, but organizations should still patch proactively.

How to fix CVE-2026-58659?

Update to patched version: PyTorch Lightning 2022.6.15.

What is the CVSS score for CVE-2026-58659?

CVE-2026-58659 has a CVSS v3.1 base score of 7.8 (HIGH). The EPSS exploitation probability is 0.33%.

What are the technical details?

Original Advisory

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called.

Weaknesses (CWE)

CWE-470 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Primary CWE-470 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Primary CWE-470 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

CWE-470 — Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection'): The product uses external input with reflection to select which classes or code to use, but it does not sufficiently prevent the input from selecting improper classes or code.

[Architecture and Design] Refactor your code to avoid using reflection.
[Architecture and Design] Do not use user-controlled inputs to select and load classes or code.

Source: MITRE CWE corpus.