Skip to content
OpenAdvisories
High · 7.8 CVE-2025-23348 EUVD-2025-30969GHSA-wh6g-3g9q-9246

NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may c…

Published Sep 24, 2025 · Updated Sep 24, 2025 · Assigned by nvidia

Description

NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA Megatron-LM All versions prior to 0.13.1 and 0.12.3 —

References