PyTorch Lightning vulnerabilities

PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method calls torch.load() without setting the security-restrictive weights_only=True parameter, allowing deserialization of arbitrary Python objects.

A vulnerability in PyTorch Lightning versions 2.6.2 and 2.6.2 introduces functionality consistent with credential harvesting.

A vulnerability in PyTorch Lightning up to version 2.6.5 (fixed in commit d710d68) allows remote code execution via the _load_state function, which imports and executes attacker-controlled module names from _instantiator hyperparameters in checkpoint files. Attackers can craft malicious checkpoint files that bypass weights_only=True protections and execute arbitrary code when LightningModule.load_from_checkpoint is called.