CVE-2026-65179
HighCVSS 8.8Summary
NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pickle.load() without validation. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information disclosure.
Risk Assessment
An attacker may achieve arbitrary code execution, data tampering, denial of service, and information disclosure. This can result in full system compromise and data confidentiality breach.
Recommendation
Upgrade NVIDIA NeMo to a version containing the fix. Avoid deserializing untrusted .pkl files and enforce input validation.
Other vulnerabilities in NVIDIA NeMo
See all- CVE-2026-65178High
NVIDIA NeMo contains a vulnerability in its dataset-loading workflow where a maliciously crafted model_config.yaml can inject unsafe parameters. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information disclosure.
- CVE-2026-24252High
A vulnerability in NVIDIA NeMo for Linux allows an attacker to cause OS command injection, potentially leading to code execution, data tampering, privilege escalation, and information disclosure.
Original NVD description (English source)
NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pickle.load() without validation. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information disclosure.