CVE-2026-65104

Published: Oct 13, 2026Modified: Oct 13, 2026

7.1

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N

Exploitability: 1.8 / Impact: 4.7

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure.

Related CWEs

CWE-328

Use of Weak Hash

The product uses an algorithm that produces a digest (output value) that does not meet security expectations for a hash function that allows an adversary to reasonably determine the original input (preimage attack), find another input that can produce the same hash (2nd preimage attack), or find multiple inputs that evaluate to the same hash (birthday attack).

References (3)

https://github.com/NVIDIA/product-security/tree/main/2026/5881

Source: psirt@nvidia.com

https://nvd.nist.gov/vuln/detail/CVE-2026-65104

Source: psirt@nvidia.com

https://www.cve.org/CVERecord?id=CVE-2026-65104

Source: psirt@nvidia.com

Timeline

No history available yet.