What is the CVSS score of CVE-2026-24152?

CVE-2026-24152 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Nvidia are affected by CVE-2026-24152?

NVIDIA Megatron-LM installations face a high-severity remote code execution risk when loading checkpoint files, potentially allowing attackers with local access to execute arbitrary code and…

How to fix or mitigate CVE-2026-24152?

Within 24 hours: Identify all systems running NVIDIA Megatron-LM and document their network connectivity and data sensitivity. Within 7 days: Implement strict access controls limiting who can place or modify checkpoint files, establish file integrity monitoring on checkpoint directories, and restrict execution of untrusted checkpoints to isolated environments. Within 30 days: Establish a secure checkpoint validation procedure, monitor NVIDIA security advisories for patch availability, and conduct a full risk assessment of affected ML pipelines.

Nvidia CVE-2026-24152

EUVD-2026-15009 HIGH

Deserialization of Untrusted Data (CWE-502)

2026-03-24 nvidia

RCE Information Disclosure Nvidia Deserialization

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 24, 2026 - 20:31 euvd

EUVD-2026-15009

Analysis Generated

Mar 24, 2026 - 20:31 vuln.today

CVE Published

Mar 24, 2026 - 20:25 nvd

HIGH 7.8

DescriptionCVE.org

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

AnalysisAI

NVIDIA Megatron-LM contains an unsafe deserialization vulnerability (CWE-502) in its checkpoint loading mechanism that allows remote code execution when a user loads a maliciously crafted checkpoint file. The vulnerability affects NVIDIA Megatron-LM installations and can lead to code execution, privilege escalation, information disclosure, and data tampering with a CVSS score of 7.8. The attack requires local access and low privileges but no user interaction once the malicious file is loaded.

Technical ContextAI

NVIDIA Megatron-LM is a large-scale transformer model training framework used for training large language models. The vulnerability stems from CWE-502 (Deserialization of Untrusted Data), where the checkpoint loading functionality fails to properly validate or sanitize serialized data before deserializing it. The affected product is identified by CPE cpe:2.3:a:nvidia:megatron_lm:*:*:*:*:*:*:*:*, indicating all versions prior to the patched release are vulnerable. Checkpoint files in ML frameworks typically contain model weights, optimizer states, and configuration data serialized using formats like pickle in Python, which can execute arbitrary code during deserialization if the file is crafted maliciously.

RemediationAI

Apply the security update provided by NVIDIA by consulting their official security advisory at https://nvidia.custhelp.com/app/answers/detail/a_id/5769 for the patched version and upgrade instructions. Until patching is complete, organizations should implement strict controls around checkpoint file sources, only loading checkpoint files from trusted and verified sources with integrity verification (cryptographic signatures or checksums). Additional mitigations include running Megatron-LM processes with minimal privileges, using sandboxing or containerization to limit the impact of potential code execution, and implementing file integrity monitoring on checkpoint directories to detect unauthorized modifications.