asr-consilium (>=1.0.1, <=1.0.6), entity-model (>=1.0.0, <=1.0.9) +28 more potentially affected by CVE-2026-24155 via nemo-toolkit (>=0.10.1, <=2.7.2)

nemo-toolkit PYPI version =0.10.1, =1.0.1, =1.0.0, =0.1.2, =0.5.0, =5.1.6, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-24155 Source advisory: MEND:CVE-2026-24155...

CVE-2026-24155

CVE-2026-24155 affects NVIDIA NeMo Framework for all platforms, described as a code injection vulnerability (CWE-94) that can lead to code execution, privilege escalation, information disclosure, and data tampering. The NVIDIA security bulletin states that CVE-2026-24155 is addressed by updating ...

CVE-2026-24155

NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

Security Bulletin: NVIDIA NeMo - June 2026

NVIDIA has released a software update for NVIDIA® NeMo Framework. To protect your system, clone or update this software to version 2.7.3 or later from the NVIDIA-NeMo/NeMo GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this...