CVE-2026-65180
HighCVSS 7.8Summary
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading that allows an attacker to cause RCE by convincing a user to load a maliciously crafted file. Successful exploitation may lead to code execution, privilege escalation, information disclosure, and data tampering.
Risk Assessment
The vulnerability enables arbitrary code execution and privilege escalation, potentially leading to full compromise of the model training environment.
Recommendation
Update NVIDIA Megatron-LM to a patched version and avoid loading checkpoints from untrusted sources.
Other vulnerabilities in NVIDIA Megatron-LM
See all- CVE-2026-65110High
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
- CVE-2026-65104High
NVIDIA Megatron-LM for all platforms contains a vulnerability in inference where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure.
Original NVD description (English source)
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS