The vulnerability of the ensemble_classifer() function in the NVIDIA Megatron-LM training library allows attackers to execute arbitrary code, gain privileges, and disclose sensitive information.

The vulnerability of the ensembleclassifer function in the library for training large language models with NVIDIA Megatron-LM exists due to improper code generation control. Exploiting this vulnerability allows attackers to execute arbitrary code, gain elevated privileges, and expose sensitive...

EUVD-2025-19044

Malicious code in bioql PyPI...

EUVD-2025-24627

Malicious code in bioql PyPI...

EUVD-2025-30971

Malicious code in bioql PyPI...

EUVD-2025-24626

Malicious code in bioql PyPI...

EUVD-2025-30973

Malicious code in bioql PyPI...

EUVD-2025-30972

Malicious code in bioql PyPI...

NVIDIA Megatron-LM ensemble_classifer script code injection vulnerability

NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. A code injection vulnerability exists in the NVIDIA Megatron-LM ensembleclassifer script, which can be exploited by attackers to cause code execution,...

NVIDIA Megatron-LM Code Injection Vulnerability (CNVD-2025-23255)

NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. NVIDIA Megatron-LM suffers from a code injection vulnerability that can be exploited by attackers to cause code injection, elevation of privilege,...

NVIDIA Megatron-LM Code Injection Vulnerability

NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. NVIDIA Megatron-LM suffers from a code injection vulnerability that stems from the possibility that the pretraingpt script may process malicious data,...

NVIDIA Megatron-LM msdp preprocessing script code injection vulnerability

NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. A code injection vulnerability exists in the NVIDIA Megatron-LM msdp preprocessing script, which can be exploited by attackers to cause code execution,...

CVE-2025-23353

NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data...

CVE-2025-23354

NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensembleclassifer script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data...

CVE-2025-23349

NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering...

Arbitrary Code Injection

Overview megatron-core is a Megatron Core - a library for efficient and scalable training of transformer based models Affected versions of this package are vulnerable to Arbitrary Code Injection in the tasks/orqa/unsupervised/nq.py component. An attacker can execute arbitrary code, escalate...

Arbitrary Code Injection

Overview megatron-core is a Megatron Core - a library for efficient and scalable training of transformer based models Affected versions of this package are vulnerable to Arbitrary Code Injection in the pretraingpt script. An attacker can execute arbitrary code, escalate privileges, access sensiti...

Arbitrary Code Injection

Overview megatron-core is a Megatron Core - a library for efficient and scalable training of transformer based models Affected versions of this package are vulnerable to Arbitrary Code Injection via the msdp\preprocessing script. An attacker can execute arbitrary code and escalate privileges...

Arbitrary Code Injection

Overview megatron-core is a Megatron Core - a library for efficient and scalable training of transformer based models Affected versions of this package are vulnerable to Arbitrary Code Injection via the ensembleclassifer script. An attacker can execute arbitrary code, escalate privileges, disclos...

CVE-2025-23354

The CVE-2025-23354 issue affects NVIDIA Megatron-LM, specifically the ensemble_classifer script, with a code injection vulnerability that attacker-supplied data can trigger. The vulnerability may enable code execution, privilege escalation, information disclosure, and data tampering. Affected com...

CVE-2025-23354

NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensembleclassifer script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data...