CVE-2026-92786

A flaw was found in LightGBM. The software does not properly validate data within text models, which can be exploited by an attacker. By crafting a malicious model file, an attacker can trigger an out-of-bounds write during the SHAP prediction process. This vulnerability could lead to arbitrary...