by Kastro
Paper/Archive/CVE-2026-24164

CVE-2026-24164

NVIDIA BioNeMo Framework — NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data.

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 41.4.414 × 208.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

Affected

ProductAffectedFixed inSource
BioNeMo FrameworkAll versions that do not include commit f2c2b14–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvidia (CNA)8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refnvd.nist.gov/vuln/detail/CVE-2026-24164refcve.org/CVERecord?id=CVE-2026-24164refnvidia.custhelp.com/app/answers/detail/a_id/5808