What is the CVSS score of CVE-2025-23265?

CVE-2025-23265 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Python are affected by CVE-2025-23265?

NVIDIA Megatron-LM contains a critical code injection vulnerability affecting all platforms that could allow attackers to execute arbitrary code and escalate privileges on affected systems.

How to fix or mitigate CVE-2025-23265?

Within 24 hours: Inventory all systems running NVIDIA Megatron-LM and assess whether they process sensitive data or have network access to production environments. Within 7 days: Implement network segmentation to isolate affected systems, restrict file upload capabilities, and disable Megatron-LM features accepting external files if operationally feasible. Within 30 days: Establish a monitoring program for vendor patches, evaluate alternative ML frameworks if remediation timeline is unacceptable, and conduct security assessments on any potentially compromised systems.

Python CVE-2025-23265

EUVD-2025-19044 HIGH

Code Injection (CWE-94)

2025-06-24 psirt@nvidia.com

RCE Python Information Disclosure Megatron Lm

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 22:36 euvd

EUVD-2025-19044

Analysis Generated

Mar 15, 2026 - 22:36 vuln.today

CVE Published

Jun 24, 2025 - 16:15 nvd

HIGH 7.8

DescriptionCVE.org

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data Tampering.

AnalysisAI

CVE-2025-23265 is a code injection vulnerability in NVIDIA Megatron-LM's Python component that allows local attackers with low privileges to execute arbitrary code by providing a malicious file. Successful exploitation enables code execution, privilege escalation, information disclosure, and data tampering. This vulnerability affects all platforms running Megatron-LM and poses significant risk to machine learning infrastructure, particularly in multi-tenant or shared compute environments.

Technical ContextAI

NVIDIA Megatron-LM is a large-scale language model training framework that processes Python files and configurations during model initialization and execution. The vulnerability resides in a Python component (likely related to configuration loading, model serialization, or dynamic code execution) and is classified as CWE-94 (Improper Control of Generation of Code), indicating unsafe deserialization, eval-like functions, or dynamic code generation from untrusted input. The vulnerability stems from insufficient validation of file contents before processing, allowing attackers to inject arbitrary Python code through crafted files that are subsequently executed within the Megatron-LM process context. This affects all platform variants (Linux, cloud deployments, on-premises installations) where Megatron-LM is deployed.

RemediationAI

Immediate actions: (1) Consult NVIDIA security advisory (referenced in CVE documentation) for patched versions—apply patches prioritizing production ML training clusters; (2) Implement file access controls restricting which users can provide configuration/model files to Megatron-LM processes; (3) Run Megatron-LM processes with minimal required privileges (non-root service account with restricted file system access); (4) Validate and sanitize all external file inputs before processing—implement file format verification and signatures; (5) Use containerization (Docker/Kubernetes) with read-only file systems and network policies to limit blast radius. Longer-term: (1) Update to patched Megatron-LM versions once available from NVIDIA; (2) Implement input validation in upstream code for all file handling operations; (3) Replace dynamic code execution patterns (if applicable) with safe alternatives; (4) Deploy runtime monitoring to detect suspicious Python code execution patterns.