CVE-2026-65104: High severity Nvidia Megatron-LM vulnerability
NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Deployments of NVIDIA Megatron-LM that accept inference requests over a network are in scope. Exploitation requires an attacker to have low-level privileges, so unauthenticated users are not indicated as able to exploit it.
What conditions does an attacker need to exploit the vulnerability?
The attacker needs network access and low privileges, and no user interaction is required. Exploitation is rated as high complexity, indicating additional conditions are required beyond simply submitting a request.
What is the likely security impact if exploitation succeeds?
The vulnerability can result in integrity impact and partial disclosure of confidential information. Its scope is changed, meaning the impact can extend beyond the directly affected security authority.