CVE-2026-24252: OS Command Injection
Published Jul 27, 2026
·Updated
NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure.
Affected Software
3 affected components
Nvidia NeMo for Linux
All of the following
Nvidia NeMo<2.7.3
Linux Linux kernel
Event History
Jul 27, 2026
CVE Published
via MITRE·04:41 PM
Data Sourced
via MITRE·04:41 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-24252?
CVE-2026-24252 has a high severity score of 7.8.
2
What type of vulnerability is CVE-2026-24252?
CVE-2026-24252 is identified as an OS Command Injection vulnerability.
3
How can CVE-2026-24252 be exploited?
CVE-2026-24252 can be exploited by an attacker to execute arbitrary commands on the host operating system.
4
What are the consequences of exploiting CVE-2026-24252?
Exploiting CVE-2026-24252 may lead to code execution, data tampering, privilege escalation, and information disclosure.
5
How do I fix CVE-2026-24252?
To fix CVE-2026-24252, update NVIDIA NeMo to the latest version that addresses this vulnerability.