CVE-2026-24149: Code Injection

Published Feb 3, 2026

Updated

NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, data tampering.

Affected Software

1 affected component

Nvidia Megatron-LM

Event History

Feb 3, 2026

CVE Published

via MITRE·07:55 PM

Data Sourced

via MITRE·07:55 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeakness

Feb 27, 58104

Event

via FIRST·07:03 AM

Frequently Asked Questions

What is the severity of CVE-2026-24149?

CVE-2026-24149 is considered a critical vulnerability due to its potential for code execution and privilege escalation.

How do I fix CVE-2026-24149?

To fix CVE-2026-24149, update NVIDIA Megatron-LM to the latest version that addresses this vulnerability.

What types of attacks can CVE-2026-24149 facilitate?

CVE-2026-24149 can facilitate code injection attacks, potentially leading to code execution and data tampering.

Which software is affected by CVE-2026-24149?

CVE-2026-24149 specifically affects NVIDIA Megatron-LM across all platforms.

What are the potential consequences of exploiting CVE-2026-24149?

Exploiting CVE-2026-24149 may lead to privilege escalation, information disclosure, and data tampering.