CVE-2026-65110
HighCVSS 7.8Summary
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Risk Assessment
Organizations using NVIDIA Megatron-LM may be exposed to remote code execution and privilege escalation in their training environment. The risk is high when users load checkpoints from untrusted sources.
Recommendation
Update NVIDIA Megatron-LM to the latest patched version and only load checkpoints from trusted sources.
Other vulnerabilities in NVIDIA Megatron-LM
See all- CVE-2026-65180High
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading that allows an attacker to cause RCE by convincing a user to load a maliciously crafted file. Successful exploitation may lead to code execution, privilege escalation, information disclosure, and data tampering.
- CVE-2026-65104High
NVIDIA Megatron-LM for all platforms contains a vulnerability in inference where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure.
Original NVD description (English source)
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS