← Database

CVE-2024-8020

HIGH CVSS: 7.5 Published: 2025-03-20 Modified: 2026-06-17

Description

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the `/api/v1/state` endpoint of `LightningApp`. This issue occurs due to improper handling of unexpected state values, which results in the server shutting down.

Affected Platforms

Lightningai Pytorch Lightning

Weakness Type

CWE-248

References