Lightning-AI/pytorch-lightning 2.6.6

Lightning 2.6.6

Repository: Lightning-AI/pytorch-lightning

Tag: 2.6.6

Published: 2026-09-10T09:39:52Z

Prerelease: no

Release notes:

Changes in 2.6.6

PyTorch Lightning

Fixed

• Fixed arbitrary code execution in load_from_checkpoint by restricting the _instantiator hyperparameter to an allowlist of trusted instantiators (#21832)

• Fixed arbitrary code execution in load_from_checkpoint by rejecting a checkpoint _class_path that does not resolve to an already imported subclass of the loaded class (#21914)

Full commit list: 2.6.5 -> 2.6.6

Contributors

We thank all folks who submitted issues, features, fixes and doc changes. It's the only way we can collectively make Lightning :zap: better for everyone, nice job!

In particular, we would like to thank the authors and co-authors of the pull-requests above:

@addyCooks @bhimrazy