TI-2026-62527 CVE-2026-92786 · GHSA-fhjh-xqqj-cjf5LightGBM through 4.7.0 Out-of-Bounds Write via Crafted ModelPriority LOW 38LightGBM through 4.7.0 fails to validate child and split array values when parsing text models, allowing attackers to write out-of-bounds memory during SHAP prediction.CVSS 4.0HIGH 8.5· Local · No auth · User interaction · EPSS 0.00186 · Published 2026-09-16 · Partial fix CWE-787
