Code Injection Vulnerability in NVIDIA Megatron-LM Affecting Multiple Platforms

CVE-2025-23357

What is CVE-2025-23357?

NVIDIA Megatron-LM across all platforms contains a vulnerability in a script that allows an attacker to craft malicious data, potentially leading to code execution. This exploit can facilitate privilege escalation, resulting in unauthorized access, information disclosure, and data manipulation.

References