CVE-2026-92786
Description
A flaw was found in LightGBM. The software does not properly validate data within text models, which can be exploited by an attacker. By crafting a malicious model file, an attacker can trigger an out-of-bounds write during the SHAP prediction process. This vulnerability could lead to arbitrary code execution or a denial of service.
Statement
An out-of-bounds write flaw rated IMPORTANT was found in LightGBM, which is shipped in Red Hat OpenShift AI (RHOAI). LightGBM through 4.7.0 fails to validate child and split array values when parsing text model files. When a crafted model file containing invalid node references is loaded and used for SHAP (feature contribution) prediction, out-of-bounds writes occur at attacker-chosen offsets in the leaf_depth_ buffer, which could lead to arbitrary code execution or a denial of service. Exploitation requires a victim to load and process an attacker-supplied malicious model file; this required user interaction is reflected in the Red Hat CVSS 3.1 score of 7.8, which is lower than the upstream CVSS 4.0 score of 8.5. Within Red Hat OpenShift AI, components that bundle the vulnerable LightGBM library are affected and a fix is being pursued by the responsible business unit. Other RHOAI container images were reviewed and determined not affected because the LightGBM component is not present or the vulnerable code is not in the executed path.
Mitigation
Exploitation requires processing a specially crafted LightGBM model file. As a workaround, only load and run predictions on LightGBM text model files obtained from trusted and verified sources, and do not process model files of unknown or untrusted origin, in particular when computing SHAP feature contributions.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 7.8 | N/A | 7.8 |
| Attack Vector | Local | N/A | Local |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | None | N/A | None |
| User Interaction | Required | N/A | Required |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | High | N/A | High |
| Integrity Impact | High | N/A | High |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cve.org: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Understanding the Weakness (CWE)
Integrity
Technical Impact: Modify Memory; Execute Unauthorized Code or Commands
Write operations could cause memory corruption. In some cases, an adversary can modify control data such as return addresses in order to execute unexpected code.
Availability
Technical Impact: DoS: Crash, Exit, or Restart
Attempting to access out-of-range, invalid, or unauthorized memory could cause the product to crash.
Other
Technical Impact: Unexpected State
Subsequent write operations can produce undefined or unexpected results.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
