Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

13 records

Priority LOW 35

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00211 Published 2026-03-24 Fixed in 0.15.3 CWE-502
Priority LOW 35

NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to load a maliciously crafted input.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00211 Published 2026-03-24 Fixed in 0.15.3 CWE-502
Priority LOW 35

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00211 Published 2026-03-24 Fixed in 0.15.3 CWE-502
Priority LOW 35

NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00211 Published 2026-03-24 Fixed in 0.15.3 CWE-502
Priority LOW 36

NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00327 Published 2026-03-24 Fixed in 0.15.3 CWE-502
TI-2025-17129 CVE-2025-23354 · GHSA-r5hm-xgfr-3f4g

Code injection in NVIDIA Megatron-LM

Priority LOW 36

NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data created by an attacker may cause an injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00243 Published 2025-09-24 No fix listed CWE-94
TI-2025-17128 CVE-2025-23353 · GHSA-h779-m55x-x42q

Code injection in NVIDIA Megatron-LM

Priority LOW 36

NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause an injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00243 Published 2025-09-24 No fix listed CWE-94
TI-2025-17124 CVE-2025-23349 · GHSA-675m-3fcr-3cvg

Code injection in NVIDIA Megatron-LM

Priority LOW 36

NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a code injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00242 Published 2025-09-24 No fix listed CWE-94
TI-2025-17123 CVE-2025-23348 · GHSA-wh6g-3g9q-9246

Code injection in NVIDIA Megatron-LM

Priority LOW 36

NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a code injection issue.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00243 Published 2025-09-24 No fix listed CWE-94
TI-2025-17082 CVE-2025-23306 · GHSA-63mx-9cw2-m4wm

Code injection in NVIDIA Megatron-LM

Priority LOW 36

NVIDIA Megatron-LM for all platforms contains a vulnerability in the megatron/training/ arguments.py component where an attacker could cause a code injection issue by providing a malicious input.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00238 Published 2025-08-13 Fixed in 0.12.2 CWE-94
TI-2025-17081 CVE-2025-23305 · GHSA-m8h2-pjq6-hmwv

Code injection in NVIDIA Megatron-LM

Priority LOW 36

NVIDIA Megatron-LM for all platforms contains a vulnerability in the tools component, where an attacker may exploit a code injection issue.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00238 Published 2025-08-13 Fixed in 0.12.2 CWE-94
TI-2025-17041 CVE-2025-23265 · GHSA-hw7x-6hm6-933c

Code injection in NVIDIA Megatron LM

Priority LOW 36

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00289 Published 2025-06-24 Fixed in 0.12.0 CWE-94
TI-2025-17040 CVE-2025-23264 · GHSA-rm88-xv8r-wmcf

Code injection in NVIDIA Megatron LM

Priority LOW 36

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00289 Published 2025-06-24 Fixed in 0.12.0 CWE-94