Skip to content
OpenAdvisories
High · 7.8 CVE-2025-23264 EUVD-2025-19045GHSA-rm88-xv8r-wmcf

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by p…

Published Jun 24, 2025 · Updated Jun 24, 2025 · Assigned by nvidia

Description

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data Tampering.

Affected products

VendorProductAffectedFixed
NVIDIA Megatron LM All versions prior to 0.12.0 —

References