CVE-2025-33239
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A vulnerability in the NVIDIA Megatron Bridge data merging tutorial allows code injection via malicious input. Successful exploitation could lead to code execution, privilege escalation, information disclosure, and data tampering.
Risk Assessment
The organization risks system compromise, sensitive data leakage, and unauthorized modifications, potentially resulting in severe security breaches and data integrity issues.
Recommendation
Immediately update NVIDIA Megatron Bridge to the latest patched version and restrict access to the data merging tutorial to trusted users only.
Other vulnerabilities in NVIDIA Megatron Bridge
See all- CVE-2026-61779High
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
- CVE-2026-61778High
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
- CVE-2026-61777High
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
- CVE-2026-61776High
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
- CVE-2026-61775High
NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.
- CVE-2026-61774High
NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.
- CVE-2026-61773High
NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.
- CVE-2026-61772High
NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.
- CVE-2026-61771High
NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.
- CVE-2026-61770High
NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.
Original NVD description (English source)
NVIDIA Megatron Bridge contains a vulnerability in a data merging tutorial, where malicious input could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS