Deserialization Vulnerability in NVIDIA Megatron Bridge
CVE-2026-61766

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Megatron Bridge
Vendor
CVE Published:
1 September 2026

What is CVE-2026-61766?

NVIDIA Megatron Bridge is exposed to a significant vulnerability stemming from improper handling of untrusted data. This deserialization flaw allows attackers to manipulate the application by potentially executing arbitrary code. Exploiting this vulnerability could lead to unauthorized data tampering and the exposure of sensitive information, thereby compromising the integrity and confidentiality of the system.

Affected Version(s)

Megatron Bridge All platforms 0.0 to 0.5.0

References

https://nvd.nist.gov/vuln/detail/CVE-2026-61766
https://www.cve.org/CVERecord?id=CVE-2026-61766
https://github.com/NVIDIA/product-security/tree/main/2026...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.