CVE-2026-24267: High severity Nvidia NeMo Speech vulnerability
Published Sep 22, 2026
·Updated
NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data explorer component, where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Affected Software
1 affected component
Nvidia NeMo Speech
Event History
Sep 22, 2026
CVE Published
via MITRE·02:03 PM
Data Sourced
via MITRE·02:03 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Are deployments on specific operating systems exempt?
No. The vulnerability is identified in NVIDIA NeMo Speech for all platforms.
2
Does an attacker need existing privileges to exploit this issue?
No privileges are required, but the vector indicates local access and user interaction are required. Exploitation involves malicious data created by an attacker.
3
What could a successful exploit allow?
A successful exploit could result in code execution, privilege escalation, information disclosure, and data tampering.