Remote Code Execution Vulnerability in NVIDIA NeMo Speech
CVE-2026-24267

7.8HIGH

Key Information:

Vendor

Nvidia

Vendor
CVE Published:
22 September 2026

What is CVE-2026-24267?

A vulnerability exists in the speech data explorer component of NVIDIA NeMo Speech, potentially allowing attackers to exploit malicious data input to execute remote code. If successfully exploited, this could lead to a range of security issues, including unauthorized code execution, privilege escalation, information disclosure, and data integrity breaches. Users of NVIDIA NeMo Speech should take immediate steps to mitigate the risk associated with this vulnerability by reviewing their security posture and applying available updates.

Affected Version(s)

NeMo Speech All platforms 0.0 to 2.9

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.