ZDI-CAN-28096
HIGH 7.8
Overdue
Sep 24, 2025
Lightning AI
Lightning AI is a company known for machine learning and AI development tools. This vulnerability has a high severity rating (7.8) and can be exploited locally without authentication or user interaction required, potentially giving attackers high-level access to confidentiality, integrity, and availability of affected systems. Security teams should monitor for any patches released before the January 22, 2026 deadline and prioritize updates for systems running Lightning AI products, particularly in environments where local access controls may be weaker.
Advisory Details
Researcher
Discovered by:
Michael DePlante (@izobashi) of Trend Zero Day Initiative
Reported
September 24, 2025
Deadline
January 22, 2026
84d overdue
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H