Skip to content
OpenAdvisories
High · 7.8 CVE-2025-23305 EUVD-2025-24626GHSA-m8h2-pjq6-hmwv

NVIDIA Megatron-LM for all platforms contains a vulnerability in the tools component, where an attacker may exploit a code injection issue.…

Published Aug 13, 2025 · Updated Aug 13, 2025 · Assigned by nvidia

Description

NVIDIA Megatron-LM for all platforms contains a vulnerability in the tools component, where an attacker may exploit a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA Megatron-LM All versions prior to 0.12.2 —

References