Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-0129 EUVD-2024-15930GHSA-f3m5-v6q6-4c4h

NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extracti…

Published Oct 15, 2024 · Updated Oct 15, 2024 · Assigned by nvidia

Description

NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to code execution and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA NeMo All versions prior to r2.0.0rc0 —

References