NVIDIA NeMo Framework vulnerabilities

The NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

NVIDIA NeMo Framework contains a vulnerability in the NLP and LLM components where malicious data crafted by an attacker could cause code injection. A successful exploit may lead to code execution, privilege escalation, information disclosure, and data tampering.

NVIDIA NeMo Framework contains a vulnerability in the bert services component where malicious data created by an attacker may cause code injection. A successful exploit may lead to code execution, privilege escalation, information disclosure, and data tampering.

NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit may lead to code execution, escalation of privileges, information disclosure, and data tampering.