EUVD-2026-46308
GHSA-8xrf-7ww8-gcv9
Severity by source
AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
CWE-502 deserialization yielding code execution warrants C:H/I:H/A:H; official C:N/I:N is inconsistent with described RCE impact and appears erroneous.
Primary rating from Vendor (nvidia).
CVSS VectorVendor: nvidia
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Lifecycle Timeline
2DescriptionCVE.org
NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
AnalysisAI
Improper deserialization of untrusted data in NVIDIA Transformers4Rec (all versions per CPE wildcard) exposes systems running the library to code execution, data tampering, and information disclosure via a local attack path. The official CVSS vector assigns C:N/I:N/A:L - a score of 4.3 - which is materially inconsistent with the vendor's own description of potential remote code execution and data tampering; this discrepancy warrants independent verification with NVIDIA's product security team. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attack requires that an attacker can supply or place a malicious serialized data artifact (e.g., a model checkpoint, configuration, or dataset file) that is subsequently loaded and deserialized by the Transformers4Rec library without integrity verification. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | There is a notable discrepancy between the official CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L, score 4.3) and the vendor's described impact of code execution, data tampering, and information disclosure. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with the ability to place or supply a malicious serialized file - such as a crafted model checkpoint or configuration artifact - into a directory or pipeline consumed by a Transformers4Rec workload could trigger code execution when the library deserializes the object without validation. No public proof-of-concept exploit is known at time of analysis, but the attack pattern for Python deserialization via pickle is well-documented and widely understood. … |
| Remediation | Consult the NVIDIA product security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5869 for the official fixed version; no specific patched version number is independently confirmed from the available data, so citing an exact upgrade target is not possible at this time. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-502 – Deserialization of Untrusted Data
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today