AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

NvidiaCVE-2026-65179

Nvidia NeMo Speech: code execution

Nvidia

CVE-2026-65179 · Published Sep 22, 2026 · updated Sep 29, 2026

High8.8
No fix yet
Nvidia advisory

NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pickle.load() without validation. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information disclosure.

Affected versions

PackageAffectedFixed in
NeMo Speech
Product
<= 0.0 to 2.9No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-502

More Nvidia advisories

All Nvidia
Medium 4.1Sep 22Nvidia Infrastructure Controller: information disclosureCVE-2026-65127no fix yetHigh 8.8Sep 22Nvidia Infrastructure Controller: SQL injectionCVE-2026-65128no fix yetMedium 6.7Sep 22Nvidia Infrastructure Controller: improper certificate validationCVE-2026-65129no fix yetHigh 8.0Sep 22Nvidia Infrastructure Controller: command injectionCVE-2026-65130no fix yetHigh 7.8Sep 22Nvidia NeMo Speech: code executionCVE-2026-65178no fix yetMedium 5.0Sep 22Nvidia Infrastructure Controller: hard-coded credentialsCVE-2026-65117no fix yet