AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

NvidiaCVE-2026-65178

Nvidia NeMo Speech: code execution

Nvidia

CVE-2026-65178 · Published Sep 22, 2026 · updated Sep 29, 2026

High7.8
No fix yet
Nvidia advisory

NVIDIA NeMo contains a vulnerability in its dataset-loading workflow where a maliciously crafted model_config.yaml can inject unsafe parameters. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information disclosure.

Affected versions

PackageAffectedFixed in
NeMo Speech
Product
<= 0.0 to 2.9No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-502

More Nvidia advisories

All Nvidia
Medium 4.1Sep 22Nvidia Infrastructure Controller: information disclosureCVE-2026-65127no fix yetHigh 8.8Sep 22Nvidia Infrastructure Controller: SQL injectionCVE-2026-65128no fix yetMedium 6.7Sep 22Nvidia Infrastructure Controller: improper certificate validationCVE-2026-65129no fix yetHigh 8.0Sep 22Nvidia Infrastructure Controller: command injectionCVE-2026-65130no fix yetHigh 8.8Sep 22Nvidia NeMo Speech: code executionCVE-2026-65179no fix yetMedium 5.0Sep 22Nvidia Infrastructure Controller: hard-coded credentialsCVE-2026-65117no fix yet