What is the CVSS score of CVE-2026-24157?

CVE-2026-24157 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Nvidia are affected by CVE-2026-24157?

NVIDIA NeMo Framework contains a critical remote code execution vulnerability that could allow attackers to execute arbitrary code, escalate privileges, and compromise data integrity on affected…. A patch is available.

How to fix or mitigate CVE-2026-24157?

Within 24 hours: Inventory all systems running NVIDIA NeMo Framework and isolate affected instances from production networks if possible; notify the security and ML engineering teams. Within 7 days: Implement network segmentation to restrict access to NeMo instances to authorized users only, disable checkpoint loading from untrusted sources, and implement file integrity monitoring on checkpoint directories. Within 30 days: Monitor NVIDIA security advisories for patch availability and develop a deployment plan; evaluate alternative frameworks or architectural changes to reduce reliance on NeMo until a patch is released.

Nvidia CVE-2026-24157

EUVD-2026-15011 HIGH

Deserialization of Untrusted Data (CWE-502)

2026-03-24 nvidia

GHSA-m4jw-wgmf-889x

RCE Information Disclosure Nvidia Deserialization

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Apr 02, 2026 - 02:30 nvd

Patch available

EUVD ID Assigned

Mar 24, 2026 - 20:31 euvd

EUVD-2026-15011

Analysis Generated

Mar 24, 2026 - 20:31 vuln.today

CVE Published

Mar 24, 2026 - 20:27 nvd

HIGH 7.8

DescriptionCVE.org

NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.

AnalysisAI

NVIDIA NeMo Framework contains a remote code execution vulnerability in its checkpoint loading mechanism caused by insecure deserialization (CWE-502). Attackers with local access and low privileges can exploit this to achieve code execution, privilege escalation, information disclosure, and data tampering with high impact on confidentiality, integrity, and availability. According to SSVC framework, there is currently no observed exploitation in the wild, though the technical impact is rated as total.

Technical ContextAI

This vulnerability affects NVIDIA NeMo Framework, an enterprise-grade toolkit for building and customizing AI models, particularly for conversational AI and large language models. The root cause is CWE-502 (Deserialization of Untrusted Data), where the framework's checkpoint loading mechanism accepts and deserializes untrusted model checkpoint files without proper validation. When NeMo loads saved model checkpoints (typically serialized Python objects using pickle or similar formats), malicious code embedded in crafted checkpoint files can be executed during the deserialization process. The affected product is identified by CPE cpe:2.3:a:nvidia:nemo_framework:*:*:*:*:*:*:*:*, indicating all versions are potentially vulnerable unless specified otherwise in the vendor advisory.

RemediationAI

Consult NVIDIA's official security advisory at https://nvidia.custhelp.com/app/answers/detail/a_id/5800 for specific patched versions and upgrade instructions for NeMo Framework. Apply the vendor-provided patches immediately, prioritizing systems in multi-user environments or those accepting checkpoint files from untrusted sources. As a temporary mitigation until patching is complete, restrict checkpoint loading to trusted sources only, implement strict file integrity validation before loading any checkpoint files, enforce principle of least privilege to limit which users can load checkpoints, and consider isolating NeMo Framework instances in containerized or sandboxed environments with restricted network and filesystem access. Organizations should also audit existing checkpoint files for integrity and review access logs for suspicious checkpoint loading activities.