NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper validation of allowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
Fix
Vendor advisories in the News 1
- ZDI-26-787: NVIDIA Megatron Bridge YAML File Parsing Code Injection Remote Code Execution Vulnerability Zero Day Initiative: published advisories · 2026-10-22
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.8 · nvidiaNVD modified 2026-10-25 17:10
Affected (CPE criteria) 1
cpe:2.3:a:nvidia:nemo_megatron_bridge:*:*:*:*:*:*:*:*
References 3
- https://github.com/NVIDIA/product-security/tree/main/2026/5841 Product
- https://nvd.nist.gov/vuln/detail/CVE-2026-24250 Third Party Advisory, US Government Resource
- https://www.cve.org/CVERecord?id=CVE-2026-24250 Third Party Advisory