Read the docs
TI-2024-05541 Aliases CVE-2024-5980GHSA-mr7h-w2qc-ffc2

Arbitrary File Write via /v1/runs API endpoint in lightning-ai/pytorch-lightning

Priority HIGH 81CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-434.

Summary

A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.01318 70th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed lightning-ai/pytorch-lightning (lightning-ai): 2.3.3lightning (PyPI): 2.3.3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
lightning-ailightning-ai/pytorch-lightningbefore 2.3.32.3.3Patch availableCNA
—lightning (PyPI)before 2.3.32.3.3Patch availableGHSA-mr7h-w2qc-ffc2
  • lightning-ai/pytorch-lightning Vendorlightning-ai Affected before 2.3.3 Fixed in 2.3.3 Patch available CNA
  • lightning (PyPI) Vendor— Affected before 2.3.3 Fixed in 2.3.3 Patch available GHSA-mr7h-w2qc-ffc2

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:lightningai:pytorch_lightning:*:*:*:*:*:python:*:*2.2.4 to before 2.3.3Vulnerablelightning-ai
  • cpe:2.3:a:lightningai:pytorch_lightning:*:*:*:*:*:python:*:* Versions 2.2.4 to before 2.3.3 Vulnerable ·lightning-ai

Remediation

  • Fix · CNA lightning-ai/pytorch-lightning (lightning-ai) Fixed in 2.3.3
  • Fix · GHSA-mr7h-w2qc-ffc2 lightning (PyPI) Fixed in 2.3.3 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-5980
  2. 2026-10-03 Alias added: GHSA-mr7h-w2qc-ffc2

References

Exploit 1

Advisory 1

Other 4

  • TI-2024-05067 RCE via Property/Class Pollution in lightning-ai/pytorch-lightning CVSS 3.1CRITICAL 9.8
  • TI-2024-07433 Arbitrary File Write/Overwrite in lightning-ai/pytorch-lightning CVSS 3.1CRITICAL 9.1
  • TI-2026-42224 PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameter CVSS 4.0HIGH 8.4
  • TI-2024-07434 Denial of Service in lightning-ai/pytorch-lightning CVSS 3.0HIGH 7.5
  • TI-2026-32421 Compromise of PyTorch Lightning PyPi Package Versions CVSS 4.0CRITICAL 9.3
  • TI-2022-00751 Code Injection in pytorchlightning/pytorch-lightning CVSS 3.1CRITICAL 9.8
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences