Skip to content
OpenAdvisories
High · 7.8 CVE-2026-24159 EUVD-2026-15015GHSA-v7v2-m736-cf3cPYSEC-2026-2675

NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution

Published Mar 24, 2026 · Updated Mar 25, 2026 · Assigned by nvidia

Description

NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA NeMo Framework All versions prior to 2.6.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI nemo-toolkit < 2.6.2 2.6.2 GHSA-v7v2-m736-cf3c

References