Skip to content
OpenAdvisories
High · 7.8 CVE-2025-23349 EUVD-2025-30971GHSA-675m-3fcr-3cvg

NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a…

Published Sep 24, 2025 · Updated Sep 24, 2025 · Assigned by nvidia

Description

NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA Megatron-LM All versions prior to 0.13.1 and 0.12.3 —

References