REDHAT-BUG-2477476: High severity PyTorch Lightning PyTorch Lightning vulnerability
Published May 14, 2026
·Updated
PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting mechanism.
Affected Software
1 affected component
PyTorch Lightning PyTorch Lightning=2.6.2
Event History
May 14, 2026
Data Sourced
via Red Hat·04:02 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2477476?
The severity of REDHAT-BUG-2477476 is classified as high with a score of 7.
2
What is the risk associated with REDHAT-BUG-2477476?
The risk associated with REDHAT-BUG-2477476 is rated at 33.
3
How does REDHAT-BUG-2477476 affect PyTorch Lightning?
REDHAT-BUG-2477476 introduces functionality that is consistent with a credential harvesting mechanism in PyTorch Lightning.
4
How do I fix REDHAT-BUG-2477476?
To fix REDHAT-BUG-2477476, it is recommended to update to a secure version of PyTorch Lightning that addresses this vulnerability.
5
What versions of PyTorch Lightning are affected by REDHAT-BUG-2477476?
REDHAT-BUG-2477476 affects PyTorch Lightning versions 2.6.2 and prior.