CVE-2024-8020

NONE EPSS 43.7%
Published Mar 20, 20251y ago · Modified Jun 17, 20261w ago
Find Similar
Published Mar 20, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the `/api/v1/state` endpoint of `LightningApp`. This issue occurs due to improper handling of unexpected state values, which results in the server shutting down.

Threat Intelligence

EPSS Exploit Probability
43.7% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-248

Affected Products 1

VendorProductVersionRange
lightningaipytorch_lightning2.3.2any

References 1

  • huntr.com https://huntr.com/bounties/8b642a78-2b80-4fb0-9b2f-8ba0ff37db6a
    ExploitThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.