NVIDIA Megatron Lm
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in NVIDIA Megatron Lm.
Recent NVIDIA Megatron Lm Security Advisories
| Advisory | Title | Published |
|---|---|---|
| 5881 | Security Bulletin - Megatron LM - October 2026 | October 13, 2026 |
| 5769 | Security Bulletin: NVIDIA Megatron LM - March 2026 | March 24, 2026 |
| 5712 | Security Bulletin: NVIDIA Megatron LM - November 2025 | November 11, 2025 |
| 5698 | Security Bulletin: NVIDIA Megatron LM - September 2025 | September 23, 2025 |
| 5685 | Security Bulletin: NVIDIA Megatron LM - August 2025 | August 12, 2025 |
| 5663 | Security Bulletin: NVIDIA Megatron LM - June 2025 | June 24, 2025 |
By the Year
In 2026 there have been 9 vulnerabilities in NVIDIA Megatron Lm with an average score of 7.7 out of ten. Last year, in 2025 Megatron Lm had 5 security vulnerabilities published. That is, 4 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.08
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 9 | 7.72 |
| 2025 | 5 | 7.80 |
It may take a day or so for new Megatron Lm vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent NVIDIA Megatron Lm Security Vulnerabilities
NVIDIA MegatronLM RCE via Malicious Checkpoint File
CVE-2026-65180
7.8 - High
- October 13, 2026
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Marshaling, Unmarshaling
NVIDIA Megatron-LM Cache Hash Collision Vulnerability (CVE-2026-65104)
CVE-2026-65104
7.1 - High
- October 13, 2026
NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure.
Reversible One-Way Hash
NVIDIA Megatron-LM vulnerable to RCE via malicious checkpoint loading
CVE-2026-65110
7.8 - High
- October 13, 2026
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Marshaling, Unmarshaling
NVIDIA MegatronLM RCE via malicious checkpoint file
CVE-2026-24152
7.8 - High
- March 24, 2026
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Marshaling, Unmarshaling
NVIDIA MegatronLM RCE via Malicious Input in Inferencing
CVE-2026-24151
7.8 - High
- March 24, 2026
NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to load a maliciously crafted input. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Marshaling, Unmarshaling
NVIDIA Megatron-LM RCE via Malicious Checkpoint Loading
CVE-2026-24150
7.8 - High
- March 24, 2026
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Marshaling, Unmarshaling
NVIDIA Megatron-LM Hybrid Conversion Script RCE via Malicious File
CVE-2025-33248
7.8 - High
- March 24, 2026
NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Marshaling, Unmarshaling
NVIDIA Megatron LM RCE via quantization config load
CVE-2025-33247
7.8 - High
- March 24, 2026
NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Marshaling, Unmarshaling
NVIDIA Megatron-LM script injection enables privilege escalation
CVE-2026-24149
7.8 - High
- February 03, 2026
NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, data tampering.
Code Injection
NVIDIA Megatron-LM Code Injection via Malicious Script
CVE-2025-23357
7.8 - High
- November 11, 2025
NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, data tampering.
Code Injection
Code Execution via Ensemble_Classifier Injection in NVIDIA Megatron-LM
CVE-2025-23354
7.8 - High
- September 24, 2025
NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data tampering.
Code Injection
Injection in NVIDIA Megatron-LM msdp Preprocessing Script Enables RCE
CVE-2025-23353
7.8 - High
- September 24, 2025
NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data tampering.
Code Injection
Code Injection via NVIDIA Megatron-LM ORQA NQ Component
CVE-2025-23349
7.8 - High
- September 24, 2025
NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Code Injection
NVIDIA Megatron-LM Pretrain_GPT Code Injection
CVE-2025-23348
7.8 - High
- September 24, 2025
NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Code Injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for NVIDIA Megatron Lm or by NVIDIA? Click the Watch button to subscribe.
