CVE-2026-24152: High severity Nvidia Megatron-LM vulnerability
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24152?
CVE-2026-24152 is considered a high severity vulnerability due to the potential for remote code execution and privilege escalation.
How do I fix CVE-2026-24152?
To mitigate CVE-2026-24152, ensure that users do not load untrusted checkpoint files and apply any available patches from NVIDIA.
What kind of attack does CVE-2026-24152 enable?
CVE-2026-24152 allows attackers to execute arbitrary code, potentially leading to information disclosure and data tampering.
Which software is affected by CVE-2026-24152?
The vulnerability CVE-2026-24152 affects NVIDIA Megatron-LM specifically.
What are the potential consequences of exploiting CVE-2026-24152?
Exploiting CVE-2026-24152 may result in code execution, escalation of privileges, information theft, and data modification.