EUVD-2026-15015
GHSA-v7v2-m736-cf3c
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.
AnalysisAI
NVIDIA NeMo Framework contains an insecure deserialization vulnerability (CWE-502) that allows authenticated local attackers to execute arbitrary code. The vulnerability affects NVIDIA NeMo Framework installations and can lead to code execution, privilege escalation, information disclosure, and data tampering. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires local access to the target system running NVIDIA NeMo Framework. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS score of 7.8 (High) reflects significant impact across confidentiality, integrity, and availability (all rated High), but the attack vector is Local (AV:L) requiring low privileges (PR:L) and low attack complexity (AC:L) with no user interaction needed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has gained initial local access to a system running NVIDIA NeMo Framework (through compromised credentials, social engineering, or exploitation of another vulnerability) crafts a malicious serialized object containing executable code. When the NeMo Framework deserializes this object during normal operations or model processing, the embedded payload executes with the privileges of the NeMo process, allowing the attacker to escalate privileges, access sensitive AI training data or model weights, tamper with model outputs, or establish persistent access to the system. |
| Remediation | Consult NVIDIA's official security bulletin at https://nvidia.custhelp.com/app/answers/detail/a_id/5800 for specific patch versions and upgrade instructions for NeMo Framework. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all systems running NVIDIA NeMo Framework and restrict access to authenticated users only. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More from same product – last 7 days
Arbitrary file read leading to remote code execution affects Langflow versions prior to 1.9.2 in any flow that uses Base
Unauthenticated remote code execution in NVIDIA Spatial Intelligence Lab's GEN3C inference API server allows network att
Code injection in NVIDIA NeMo Framework across all supported platforms allows a local attacker with low privileges to ex
Local code execution in NVIDIA NeMo Framework on Linux allows an authenticated low-privileged attacker to abuse unsafe d
Share
External POC / Exploit Code
Leaving vuln.today