EUVD-2026-41016
GHSA-2x88-gp65-5gf7
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitation needs no privileges but requires the victim to locally load a malicious artifact, so AV:L/PR:N/UI:R; code execution yields full C:H/I:H/A:H.
Primary rating from Vendor (nvidia).
CVSS VectorVendor: nvidia
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
Articles & Coverage 1
AnalysisAI
Arbitrary code execution in NVIDIA Megatron Bridge for Linux stems from improper control of code generation (CWE-94), allowing an attacker who convinces a user to process a malicious artifact to run code in the context of the training/inference workload. Successful exploitation can escalate privileges, tamper with data, and disclose information. There is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; the CVSS 3.1 vector (AV:L/UI:R) indicates local access with user interaction is required.
Technical ContextAI
NVIDIA Megatron Bridge is a Python-based framework in the Megatron/NeMo LLM ecosystem used to bridge and convert large-model checkpoints and orchestrate distributed training/inference pipelines. The root cause is CWE-94 (Improper Control of Generation of Code, i.e. code injection): the software dynamically constructs or evaluates code/objects from externally influenced input - commonly via deserialization of model checkpoints, configuration files, or dynamically imported modules - without adequately constraining what is executed. The single affected product identified by CPE is cpe:2.3:a:nvidia:megatron-bridge (all versions listed as '*'), so the exact fixed and vulnerable boundaries are not encoded in the CPE and must be read from NVIDIA's advisory.
RemediationAI
Patch available per vendor advisory: consult NVIDIA's Megatron Bridge security notice at https://github.com/NVIDIA/product-security/tree/main/2026/5841 and upgrade to the fixed release identified there - an exact patched version number is not present in the provided input, so do not assume one; verify it directly in the advisory. As compensating controls until patched, only load model checkpoints, configuration files, and pipeline artifacts from trusted, integrity-verified sources (avoid arbitrary Hugging Face/third-party checkpoints), and prefer safetensors-style non-executable formats over pickle-based ones where the framework allows it, which prevents deserialization-triggered code execution at the cost of blocking legacy checkpoints. Run Megatron Bridge under a dedicated low-privilege service account with filesystem and network egress restrictions so that even if code executes it cannot escalate or exfiltrate - the trade-off is added operational friction for legitimate multi-node training. Additionally, restrict who can supply job inputs and enforce code review of config files, accepting reduced convenience in shared research environments.
More in Megatron Bridge
View allArbitrary code execution in NVIDIA Megatron Bridge (all versions per the NVIDIA advisory) arises from unsafe deserializa
Insecure deserialization in NVIDIA Megatron Bridge for Linux (CWE-502) lets an attacker who supplies a crafted serialize
Arbitrary code execution in NVIDIA Megatron Bridge on Linux arises from unsafe reflection (CWE-470), where externally-co
Deserialization of untrusted data in NVIDIA Megatron Bridge for Linux (CWE-502) can lead to arbitrary code execution, pr
Deserialization of untrusted data in NVIDIA Megatron Bridge for Linux allows a low-privileged local attacker to achieve
Local code execution and privilege escalation in NVIDIA Megatron Bridge (Linux) stems from unsafe handling of dynamicall
Local privilege escalation and code execution in NVIDIA Megatron Bridge for Linux stems from unsafe deserialization of a
Arbitrary code execution in NVIDIA Megatron Bridge for Linux arises from unsafe deserialization of untrusted data (CWE-5
Arbitrary code execution and privilege escalation in NVIDIA Megatron Bridge on Linux arises from unsafe deserialization
Server-side request forgery in NVIDIA Megatron Bridge for Linux allows an attacker to coerce the software into issuing a
NVIDIA Megatron Bridge contains a vulnerability in a data shuffling tutorial, where malicious input could cause a code i
NVIDIA Megatron Bridge contains a vulnerability in a data merging tutorial, where malicious input could cause a code inj
Same weakness CWE-94 – Code Injection
View allSame technique Code Injection
View allShare
External POC / Exploit Code
Leaving vuln.today