Deserialization Vulnerability in NVIDIA NeMo Framework for Linux
CVE-2026-24228

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Nemo Framework
Vendor
CVE Published:
16 June 2026

What is CVE-2026-24228?

The NVIDIA NeMo Framework for Linux has a vulnerability that allows an attacker to perform deserialization of untrusted data. This flaw could lead to severe consequences such as executing arbitrary code, escalating user privileges, tampering with data, and disclosing sensitive information. It is crucial for users of the NeMo Framework to implement proper security measures to protect their systems from potential exploitation of this vulnerability.

Affected Version(s)

NeMo Framework All platforms Versions 0.0 to 2.7.2

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24228
https://www.cve.org/CVERecord?id=CVE-2026-24228
https://nvidia.custhelp.com/app/answers/detail/a_id/5839

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.