Remote code execution in pytorch lightning
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the deepdiff library. The library uses deepdiff.Delta objects to modify application state based on frontend actions. However, it is possible to bypass the intended restrictions on modifying dunder attributes, allowing an attacker to construct a serialized delta that passes the deserializer whitelist and contains dunder attributes. When processed, this can be exploited to access other modules, classes, and instances, leading to arbitrary attribute write and total RCE on any self-hosted pytorch-lightning application in its default configuration, as the delta endpoint is enabled by default.
Affected software
Click a technology to see all vulnerabilities affecting it.
| Platform | Package | Vulnerable versions | Fixed in |
|---|---|---|---|
| Python (PyPI) | lightning | < 2.3.3 | 2.3.3 |
| Python (PyPI) | pytorch-lightning | < 2.3.3 | 2.3.3 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-5452
- https://github.com/Lightning-AI/pytorch-lightning/issues/20038
- https://github.com/lightning-ai/pytorch-lightning/commit/330af381de88cff17515418a341cbc1f9f127f9a
- https://github.com/Lightning-AI/pytorch-lightning/releases/tag/2.3.3
- https://github.com/lightning-ai/pytorch-lightning
- https://huntr.com/bounties/486add92-275e-4a7b-92f9-42d84bc759da
- https://pypi.org/project/lightning
- https://github.com/advisories/GHSA-cgwc-qvrx-rf7f
- CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- Weakness (CWE)
CWE-913, CWE-915- Platform
- Python (PyPI)
- Package
lightning, pytorch-lightning- Disclosed
- 06.06.2024
- Updated
- 11.10.2026 15:18
Sources and licenses
OSV / GitHub Advisory Database - PYSEC-2026-385 - PyPA Advisory Database; CC BY 4.0
OSV / GitHub Advisory Database - GHSA-cgwc-qvrx-rf7f - CC BY 4.0
OSV / GitHub Advisory Database - PYSEC-2026-3974 - PyPA Advisory Database; CC BY 4.0
Vulnerability history: pytorch-lightning
All published vulnerabilities of this package (Python (PyPI)), newest first. Shows whether this is a one-off slip or a package that needs watching.
- Total entries
- 9
- First → latest
- 12.2021 07.2026
- Without a fix
- 2
- Exploited in attacks
- 0
Severity breakdown
- Critical 5
- High 4
Disclosures per year
- 2021: 1
- 2022: 1
- 2023: 0
- 2024: 2
- 2025: 2
- 2026: 3
-
Remote code execution in pytorch lightning this entry
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.