CVE-2026-65104
HighCVSS 7.1Summary
NVIDIA Megatron-LM for all platforms contains a vulnerability in inference where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure.
Risk Assessment
Organizations using NVIDIA Megatron-LM may be exposed to manipulation of inference results and partial data leakage. The risk affects environments serving inference to multiple users.
Recommendation
Update NVIDIA Megatron-LM to the latest patched version and monitor for unusual inference cache behavior.
Other vulnerabilities in NVIDIA Megatron-LM
See all- CVE-2026-65180High
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading that allows an attacker to cause RCE by convincing a user to load a maliciously crafted file. Successful exploitation may lead to code execution, privilege escalation, information disclosure, and data tampering.
- CVE-2026-65110High
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Original NVD description (English source)
NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS