ZDI-CAN-28096 HIGH 7.8 Overdue Sep 24, 2025

Lightning AI

Lightning AI is a company known for machine learning and AI development tools. This vulnerability has a high severity rating (7.8) and can be exploited locally without authentication or user interaction required, potentially giving attackers high-level access to confidentiality, integrity, and availability of affected systems. Security teams should monitor for any patches released before the January 22, 2026 deadline and prioritize updates for systems running Lightning AI products, particularly in environments where local access controls may be weaker.

Advisory Details
Researcher Discovered by: Michael DePlante (@izobashi) of Trend Zero Day Initiative
Reported September 24, 2025
Deadline January 22, 2026 84d overdue
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy