CVE-2026-65180: High severity Nvidia Megatron-LM vulnerability
Published Oct 13, 2026
·Updated
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Affected Software
1 affected component
Nvidia Megatron-LM
Event History
Oct 13, 2026
CVE Published
via MITRE·01:05 PM
Data Sourced
via MITRE·01:05 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
The attacker must convince a user to load a maliciously crafted checkpoint file. Exploitation requires local access and low privileges, and does not require user interaction beyond the victim loading the file.
2
What could happen if a malicious checkpoint is loaded?
A successful exploit can result in remote code execution in the context of the user loading the checkpoint. The impact may include privilege escalation, information disclosure, and data tampering.