CVE-2026-24151 - NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to load a maliciously crafted input

Back Back to CVE browser

HIGH

NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to load a maliciously crafted input

Published Mar 24, 2026

7.8

HIGH

CVSS 3.1

EPSS 0.21%

Description

NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to load a maliciously crafted input. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

Affected products

Vendor NVIDIA Product Megatron LM Default
unaffected
- Version
  All versions prior to 0.15.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

NVIDIA

Megatron LM

unaffected

Version	Status	Constraints
All versions prior to 0.15.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-15007
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-24151
Third Party AdvisoryUS Government Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5769
Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2026-24151
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-15007		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-24151		Third Party AdvisoryUS Government Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5769		Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2026-24151		Third Party Advisory