CVE-2026-24157: Critical severity Nvidia NeMo framework vulnerability
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24157?
The severity of CVE-2026-24157 is considered critical due to its potential for remote code execution.
How do I fix CVE-2026-24157?
To fix CVE-2026-24157, users should immediately update to the latest patched version of the NVIDIA NeMo Framework.
What is the impact of CVE-2026-24157?
The impact of CVE-2026-24157 includes possible remote code execution, privilege escalation, information disclosure, and data tampering.
Who is affected by CVE-2026-24157?
CVE-2026-24157 affects users of the NVIDIA NeMo Framework that utilize checkpoint loading functionality.
Is CVE-2026-24157 being actively exploited?
There are indications that CVE-2026-24157 could be actively exploited, making immediate remediation essential.