572 matches found
CVE-2026-24252
NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure...
CVE-2026-24252
NVIDIA NeMo for Linux has a reported vulnerability CVE-2026-24252 enabling OS command injection. The issue is documented in NVIDIA’s June 2026 Security Bulletin and corroborated by multiple sources. Affected component: NeMo Framework for Linux (library/implementation used on Linux). Root cause: c...
CVE-2026-24252
NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure...
EUVD-2026-49370
NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure...
GHSA-FGCW-684Q-JJ6R vulnerabilities
Vulnerabilities for packages: text-generation-inference, nemo...
CVE-2026-5241 vulnerabilities
Vulnerabilities for packages: text-generation-inference, nemo...
GHSA-HWPQ-HMQ9-WJ77 vulnerabilities
Vulnerabilities for packages: nemo...
CVE-2026-44512 vulnerabilities
Vulnerabilities for packages: nemo...
PYSEC-2026-2674 NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering...
PYSEC-2026-2675 NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering...
PYSEC-2026-2673 NVIDIA NeMo Framework Deserializes Untrusted Data
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering...
PYSEC-2026-2672 NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...
CVE-2026-15044
A flaw was found in the TrustyAI Service Operator. When deploying services like gorch or NemoGuardrails, if a specific security setting is not enabled, these services can expose their communication channels without requiring users to prove their identity. This allows any other program within the...
PT-2026-56458
Name of the Vulnerable Software and Affected Versions TrustyAI Service Operator affected versions not specified Description A flaw in the TrustyAI Service Operator occurs when deploying services such as gorch or NemoGuardrails. If a specific security setting is not enabled, these services expose...
PYSEC-2026-685 Path Traversal in nemo-toolkit
NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: gitea, containerd, k9s, traefik, kubescape-server, minio, knative-serving-fips, argocd-image-updater, argo-cd, gatekeeper, kyverno-fips, nerdctl, kube-arangodb-fips, k3s, calico-fips, trivy-fips, minio-fips, argocd-image-updater-fips, cloud-provider-aws,...
GHSA-X746-7M8F-X49C vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, nemo...
CVE-2026-48817 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, nemo...