CVE-2026-44484

CriticalCVSS 9.8

Published: 14/05/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

31th percentile - higher than 31% of all known CVEs

Summary

A vulnerability in PyTorch Lightning versions 2.6.2 and 2.6.2 introduces functionality consistent with credential harvesting.

Risk Assessment

An attacker can exploit this vulnerability to capture sensitive credentials, leading to unauthorized access to systems and data.

Recommendation

Immediately update PyTorch Lightning to the latest available version that fixes this vulnerability and review configurations for any suspicious changes.

Original NVD description (English source)

PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting mechanism.