AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

NvidiaCVE-2026-24252

Nvidia NeMo Framework: command injection

Nvidia

CVE-2026-24252 · Published Jul 27, 2026 · updated Sep 4, 2026

High7.8
No fix yet
Nvidia advisory

NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure.

Affected versions

PackageAffectedFixed in
NeMo Framework
Product
<= Versions 0.0 to 2.7.2No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More Nvidia advisories

All Nvidia
High 7.5Aug 4Nvidia Dynamo: server-side request forgeryCVE-2026-47615no fix yetHigh 7.5Aug 4Nvidia Dynamo: server-side request forgeryCVE-2026-47614no fix yetCritical 9.8Aug 4Nvidia Dynamo: out-of-bounds writeCVE-2026-24254no fix yetHigh 8.2Aug 4Nvidia Dynamo: out-of-bounds writeCVE-2026-24253no fix yetHigh 8.2Jul 28Nvidia DCGM: resource exhaustionCVE-2026-47483no fix yetMedium 4.3Jul 21Nvidia Tranformers4Rec: unsafe deserializationCVE-2026-24232no fix yet