CVE-2024-5452
published 2024-06-06CVE-2024-5452: A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user…
PriorityP276critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
26.49%
97.8th percentile
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the `deepdiff` library. The library uses `deepdiff.Delta` objects to modify application state based on frontend actions. However, it is possible to bypass the intended restrictions on modifying dunder attributes, allowing an attacker to construct a serialized delta that passes the deserializer whitelist and contains dunder attributes. When processed, this can be exploited to access other modules, classes, and instances, leading to arbitrary attribute write and total RCE on any self-hosted pytorch-lightning application in its default configuration, as the delta endpoint is enabled by default.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| internlm | lmdeploy | >= 0 < 0.11.1 | 0.11.1 |
| lightning-ai | lightning-ai_pytorch-lightning | >= unspecified < 2.3.3 | 2.3.3 |
| lightningai | pytorch_lightning | < 2.3.3 | 2.3.3 |
| lightningai | pytorch_lightning | >= 0 < 2.3.3 | 2.3.3 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()
osv·2025-12-26
CVE-2025-67729 [HIGH] lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()
lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()
## Summary
An insecure deserialization vulnerability exists in lmdeploy where `torch.load()` is called without the `weights_only=True` parameter when loading model checkpoint files. This allows an attacker to execute arbitrary code on the victim's machine when they load a malicious `.bin` or `.pt` model file.
**CWE:** CWE-502 - Deserialization of Untrusted Data
---
## Details
Several locations in lmdeploy use `torch.load()` without the recommended `weights_only=True` security parameter. PyTorch's `torch.load()` uses Python's pickle module internally, which can execute arbitrary code during deserialization.
### Vulnerable Locations
**1. `lmdeploy/vl/model/utils.py` (Line 22)**
```python
de
GHSA
lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()
ghsa·2025-12-26
CVE-2025-67729 [HIGH] CWE-502 lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()
lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()
## Summary
An insecure deserialization vulnerability exists in lmdeploy where `torch.load()` is called without the `weights_only=True` parameter when loading model checkpoint files. This allows an attacker to execute arbitrary code on the victim's machine when they load a malicious `.bin` or `.pt` model file.
**CWE:** CWE-502 - Deserialization of Untrusted Data
---
## Details
Several locations in lmdeploy use `torch.load()` without the recommended `weights_only=True` security parameter. PyTorch's `torch.load()` uses Python's pickle module internally, which can execute arbitrary code during deserialization.
### Vulnerable Locations
**1. `lmdeploy/vl/model/utils.py` (Line 22)**
```python
de
OSV
Remote code execution in pytorch lightning
osv·2024-06-06
CVE-2024-5452 [CRITICAL] Remote code execution in pytorch lightning
Remote code execution in pytorch lightning
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the `deepdiff` library. The library uses `deepdiff.Delta` objects to modify application state based on frontend actions. However, it is possible to bypass the intended restrictions on modifying dunder attributes, allowing an attacker to construct a serialized delta that passes the deserializer whitelist and contains dunder attributes. When processed, this can be exploited to access other modules, classes, and instances, leading to arbitrary attribute write and total RCE on any self-hosted pytorch-lightning application in its default configuratio
GHSA
Remote code execution in pytorch lightning
ghsa·2024-06-06
CVE-2024-5452 [CRITICAL] CWE-913 Remote code execution in pytorch lightning
Remote code execution in pytorch lightning
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the `deepdiff` library. The library uses `deepdiff.Delta` objects to modify application state based on frontend actions. However, it is possible to bypass the intended restrictions on modifying dunder attributes, allowing an attacker to construct a serialized delta that passes the deserializer whitelist and contains dunder attributes. When processed, this can be exploited to access other modules, classes, and instances, leading to arbitrary attribute write and total RCE on any self-hosted pytorch-lightning application in its default configuratio
No detection rules found.
No public exploits indexed.
2024-06-06
Published