CVE-2026-58659: PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_st

PyTorch Lightning (a framework for training AI models) versions up to 2.6.5 contain a remote code execution vulnerability (a security flaw that lets attackers run their own code on your computer) in the _load_state function. Attackers can create malicious checkpoint files (saved model data) that bypass security protections and execute harmful code when you load a model using LightningModule.load_from_checkpoint.