by Kastro
Paper/Archive/CVE-2026-24159

CVE-2026-24159

NVIDIA NeMo Framework — NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution.

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 51.2.512 × 2010.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.

Affected

ProductAffectedFixed inSource
NeMo FrameworkAll versions prior to 2.6.2–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvidia (CNA)7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refnvd.nist.gov/vuln/detail/CVE-2026-24159refcve.org/CVERecord?id=CVE-2026-24159refnvidia.custhelp.com/app/answers/detail/a_id/5800