CVE-2025-23306: Improper Control of Generation of Code

NVIDIA Megatron-LM for all platforms contains a vulnerability in the megatron/training/ arguments.py component where an attacker could cause a code injection issue by providing a malicious input. A successful exploit of this vulnerability may lead to code execution, escalation of privileges,...

CVE-2025-23265

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

CVE-2025-23264

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

CVE-2025-23265

NVIDIA Megatron-LM vulnerable in a Python component to Arbitrary Code Injection via a malicious file, potentially enabling Code Execution, Privilege Escalation, Information Disclosure and Data Tampering. Remediation per NVIDIA advisory: upgrade to Megatron-LM 0.12.1 or later (from NVIDIA’s bullet...

CVE-2025-23265

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

CVE-2025-23265

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

CVE-2025-23265

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

CVE-2025-23264

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

CVE-2025-23264

CVE-2025-23264 affects NVIDIA Megatron-LM across platforms due to a vulnerability in a Python component that allows code injection via a malicious file. Exploitation may lead to Code Execution, Privilege Escalation, Information Disclosure, and Data Tampering. Public sources (NVD/Red Hat) describe...

CVE-2025-23264

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

Security Bulletin: NVIDIA Megatron LM - June 2025

NVIDIA has released a software update for NVIDIA® Megatron LM. To protect your system, clone or update this software to version 0.12.1 or later from Releases · NVIDIA/Megatron-LM on GitHub. Go to NVIDIA Product Security...

PT-2025-26750 · Nvidia · Nvidia Megatron-Lm

Name of the Vulnerable Software and Affected Versions: NVIDIA Megatron-LM affected versions not specified Description: The issue concerns a code injection vulnerability in a python component of NVIDIA Megatron-LM. An attacker can exploit this by providing a malicious file, potentially leading to...

NVIDIA Megatron-LM 代码注入漏洞

NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. NVIDIA Megatron-LM suffers from a code injection vulnerability that stems from a python component that could allow an attacker to perform code injection...

PT-2025-26749 · Nvidia · Nvidia Megatron-Lm

Name of the Vulnerable Software and Affected Versions: NVIDIA Megatron-LM affected versions not specified Description: The issue concerns a code injection vulnerability in a python component of NVIDIA Megatron-LM. An attacker can exploit this by providing a malicious file, potentially leading to...

CVE-2025-23264: Improper Control of Generation of Code

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

NVIDIA Megatron-LM 代码注入漏洞

NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. NVIDIA Megatron-LM suffers from a code injection vulnerability that stems from a python component that could allow an attacker to perform code injection...

CVE-2025-23265: Improper Control of Generation of Code

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

CVE-2025-5876

A vulnerability classified as problematic was found in Lucky LM-520-SC, LM-520-FSC and LM-520-FSC-SAM up to 20250321. Affected by this vulnerability is an unknown functionality. The manipulation leads to missing authentication. The attack can be launched remotely. The exploit has been disclosed t...

CVE-2025-5876

CVE-2025-5876 concerns Lucky LM-520-SC, LM-520-FSC and LM-520-FSC-SAM up to 20250321, where a lack of authentication on an unknown functionality enables remote exploitation. Public disclosures exist; vendors were contacted but did not respond. Connected sources consistently describe the root caus...

CVE-2025-5876 Lucky LM-520-SC/LM-520-FSC/LM-520-FSC-SAM missing authentication

A vulnerability classified as problematic was found in Lucky LM-520-SC, LM-520-FSC and LM-520-FSC-SAM up to 20250321. Affected by this vulnerability is an unknown functionality. The manipulation leads to missing authentication. The attack can be launched remotely. The exploit has been disclosed t...