Improper Deserialization in NVIDIA NVTabular
CVE-2026-24221

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Nvtabular
Vendor
CVE Published:
2 June 2026

What is CVE-2026-24221?

NVIDIA NVTabular is susceptible to a vulnerability that allows an attacker to exploit improper deserialization of untrusted data. When exploited, this vulnerability could result in arbitrary code execution, unauthorized data manipulation, and potential exposure of sensitive information. It is critical for users of NVTabular to remain vigilant and apply security updates to protect against these risks.

Affected Version(s)

NVTabular All 0.0 to 5dd11f4

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24221
https://www.cve.org/CVERecord?id=CVE-2026-24221
https://nvidia.custhelp.com/app/answers/detail/a_id/5851

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.