Database/AI/ML frameworks & serving
PyTorch Lightning (`_load_state`): RCE by importing and executing classes named in the checkpoint
CVE-2026-58659AI/ML frameworks & servingcurated
Impact
RCE by importing and executing classes named in the checkpoint
Who can reach it
Customer-supplied checkpoint
What to do
No format-level fix — the checkpoint format is the vulnerability. Enforce safetensors
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.