Skip to content
OpenAdvisories
High · 7.8 CVE-2025-23265 EUVD-2025-19044GHSA-hw7x-6hm6-933c

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by p…

Published Jun 24, 2025 · Updated Jun 24, 2025 · Assigned by nvidia

Description

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data Tampering.

Affected products

VendorProductAffectedFixed
NVIDIA Megatron LM All versions prior to 0.12.0 —

References