CVE-2026-24157

Published: Mar 24, 2026Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.

Affected (1)

Products: Nvidia: Nemo

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nvidia Nemo	Before 2.6.2

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-24157

Source: psirt@nvidia.com

Third Party AdvisoryUS Government Resource

https://nvidia.custhelp.com/app/answers/detail/a_id/5800

Source: psirt@nvidia.com

Vendor Advisory

https://www.cve.org/CVERecord?id=CVE-2026-24157

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.