by Kastro
Paper/Archive/CVE-2026-24157

CVE-2026-24157

NVIDIA NeMo Framework — NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution.

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 51.8.518 × 2010.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.

Affected

ProductAffectedFixed inSource
NeMo FrameworkAll versions prior to 2.6.2–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvidia (CNA)7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refnvd.nist.gov/vuln/detail/CVE-2026-24157refcve.org/CVERecord?id=CVE-2026-24157refnvidia.custhelp.com/app/answers/detail/a_id/5800