Skip to content
OpenAdvisories
High · 7.8 CVE-2025-33248 EUVD-2025-208975GHSA-wxjh-pc4c-7rjq

NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load…

Published Mar 24, 2026 · Updated Mar 25, 2026 · Assigned by nvidia

Description

NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA Megatron LM All versions prior to 0.15.3 —

References