CVE-2026-24232 - NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data

Back Back to CVE browser

MEDIUM

NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data

Published Jul 21, 2026

4.3

MEDIUM

CVSS 3.1

EPSS 0.38%

Description

NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

Affected products

Vendor NVIDIA Product Tranformers4Rec Default
unaffected
- Version
  0 < 41b14d7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

NVIDIA

Tranformers4Rec

unaffected

Version	Status	Constraints
0 < 41b14d7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (3)

Link	Providers	Tags
https://github.com/NVIDIA/product-security/tree/main/2026/5869
https://nvd.nist.gov/vuln/detail/CVE-2026-24232
https://www.cve.org/CVERecord?id=CVE-2026-24232