Code Injection Vulnerability in NVIDIA Megatron-LM

CVE-2025-23264

What is CVE-2025-23264?

NVIDIA Megatron-LM across all platforms is susceptible to a code injection vulnerability within a Python component. An attacker can exploit this flaw by uploading a malicious file, which may result in severe consequences such as unauthorized code execution, privilege escalation, information disclosure, and potential data tampering. Such vulnerabilities pose serious security risks for users and organizations utilizing this product.

References