CVE-2026-24155
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
The NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Risk Assessment
Exploitation of this vulnerability could threaten the integrity of the system, allowing attackers to execute arbitrary code and access sensitive data.
Recommendation
It is recommended to update the NVIDIA NeMo framework to the latest version and implement appropriate security measures to minimize risk.
Other vulnerabilities in NVIDIA NeMo Framework
See all- CVE-2025-33204High
NVIDIA NeMo Framework contains a vulnerability in the NLP and LLM components where malicious data crafted by an attacker could cause code injection. A successful exploit may lead to code execution, privilege escalation, information disclosure, and data tampering.
- CVE-2025-33178High
NVIDIA NeMo Framework contains a vulnerability in the bert services component where malicious data created by an attacker may cause code injection. A successful exploit may lead to code execution, privilege escalation, information disclosure, and data tampering.
- CVE-2025-23361High
NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Original NVD description (English source)
NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS