TI-2026-62527 CVE-2026-92786 · GHSA-fhjh-xqqj-cjf5
LightGBM through 4.7.0 Out-of-Bounds Write via Crafted Model
Priority LOW 38
LightGBM through 4.7.0 fails to validate child and split array values when parsing text models, allowing attackers to write out-of-bounds memory during SHAP prediction.