EUVD-2026-41040
GHSA-w6mv-qpwp-2h37
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Matched vendor AV:L/UI:R (local processing of crafted input); scored C:H for information disclosure but I:N/A:N since the description supports only confidentiality impact, unlike the vendor's I:H/A:H.
Primary rating from Vendor (nvidia).
CVSS VectorVendor: nvidia
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
Articles & Coverage 1
AnalysisAI
Server-side request forgery in NVIDIA Megatron Bridge for Linux allows an attacker to coerce the software into issuing attacker-controlled requests, potentially leading to disclosure of sensitive information. The flaw (CWE-918) was reported by NVIDIA itself and carries a vendor CVSS 3.1 score of 7.8; notably the vector is scored as local with required user interaction (AV:L/UI:R) rather than a classic remote SSRF, which security teams should reconcile against the SSRF classification. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Technical ContextAI
Megatron Bridge is NVIDIA's open-source Python library that bridges Megatron-Core with the broader PyTorch/Hugging Face ecosystem to support large-language-model training, checkpoint conversion, and distributed training pipelines. The root cause is CWE-918 (Server-Side Request Forgery): the application takes a URL or resource reference influenced by attacker-controlled input (for example a model, dataset, or configuration reference) and fetches it without adequate validation, allowing the request destination to be manipulated. Because SSRF lets the software reach internal endpoints or metadata services it can normally access, the primary consequence documented here is information disclosure. The only CPE provided is cpe:2.3:a:nvidia:megatron-bridge:*:*:*:*:*:*:*:*, with no explicit version boundaries enumerated.
RemediationAI
Consult the NVIDIA product-security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5841 for the fixed release and upgrade Megatron Bridge to the patched version; an exact fix version was not provided in this data, so treat it as 'Patch available per vendor advisory' and confirm the version from that advisory before deployment. As compensating controls until patched, restrict which URLs and resource references the library is allowed to fetch (allowlist trusted model/dataset/config hosts and reject internal IP ranges and cloud metadata endpoints such as 169.254.169.254), run training jobs in a network segment with egress filtering that blocks access to internal services and metadata APIs, and avoid processing untrusted model, dataset, or configuration inputs from unverified sources given the UI:R requirement. The trade-off of egress filtering and URL allowlisting is that legitimate remote model/dataset pulls may break and require explicit allowlist entries.
More in Megatron Bridge
View allArbitrary code execution in NVIDIA Megatron Bridge for Linux stems from improper control of code generation (CWE-94), al
Arbitrary code execution in NVIDIA Megatron Bridge (all versions per the NVIDIA advisory) arises from unsafe deserializa
Insecure deserialization in NVIDIA Megatron Bridge for Linux (CWE-502) lets an attacker who supplies a crafted serialize
Arbitrary code execution in NVIDIA Megatron Bridge on Linux arises from unsafe reflection (CWE-470), where externally-co
Deserialization of untrusted data in NVIDIA Megatron Bridge for Linux (CWE-502) can lead to arbitrary code execution, pr
Deserialization of untrusted data in NVIDIA Megatron Bridge for Linux allows a low-privileged local attacker to achieve
Local code execution and privilege escalation in NVIDIA Megatron Bridge (Linux) stems from unsafe handling of dynamicall
Local privilege escalation and code execution in NVIDIA Megatron Bridge for Linux stems from unsafe deserialization of a
Arbitrary code execution in NVIDIA Megatron Bridge for Linux arises from unsafe deserialization of untrusted data (CWE-5
Arbitrary code execution and privilege escalation in NVIDIA Megatron Bridge on Linux arises from unsafe deserialization
NVIDIA Megatron Bridge contains a vulnerability in a data shuffling tutorial, where malicious input could cause a code i
NVIDIA Megatron Bridge contains a vulnerability in a data merging tutorial, where malicious input could cause a code inj
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today