CVE-2026-24239

NVIDIA NeMo Speech for all platforms contains a vulnerability where processing malicious data created by an attacker can lead to remote code execution . A successful exploit may result in code execution, information disclosure, and data tampering. This issue is associated with CWE-502 (Deserializ...

CVE-2026-24267

NVIDIA NeMo Speech for all platforms is affected by a vulnerability in the speech data explorer component. An attacker can provide malicious data to trigger remote code execution , which may lead to escalation of privileges , information disclosure , and data tampering . This issue is associated ...

CVE-2026-24267

NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data explorer component, where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information...

CVE-2026-24267

NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data explorer component, where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information...

EUVD-2026-84402

NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data explorer component, where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information...

Security Bulletin: NVIDIA NeMo Speech - September 2026

NVIDIA has released a software update for NVIDIA® NeMo Speech. To protect your system, clone or update this software to version 3.0 or later from NVIDIA-NeMo/Speech on GitHub. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security...

CVE-2026-65178: Deserialization of Untrusted Data

NVIDIA NeMo contains a vulnerability in its dataset-loading workflow where a maliciously crafted modelconfig.yaml can inject unsafe parameters. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information disclosure...

PT-2026-96738

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Speech affected versions not specified Description A flaw exists in the speech data explorer component that allows remote code execution when processing malicious data created by an attacker. This could result in escalation of...

CVE-2026-24239: Deserialization of Untrusted Data

NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

CVE-2026-24267: Deserialization of Untrusted Data

NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data explorer component, where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information...

CVE-2026-65179: Deserialization of Untrusted Data

NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pickle.load without validation. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information...

PT-2026-96754

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo affected versions not specified Description A flaw exists in the dataset-loading workflow where a maliciously crafted model config.yaml file allows the injection of unsafe parameters. This can result in remote code execution, data...

CVE-2026-65111: Improper Neutralization of Special Elements used in a Command

NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

PT-2026-96739

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Speech affected versions not specified Description Malicious input created by an attacker could cause a code injection. This issue may lead to arbitrary code execution, information disclosure, and data tampering. Recommendations At...

PT-2026-96737

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Speech affected versions not specified Description Malicious data created by an attacker can lead to remote code execution. A successful exploit may result in code execution, information disclosure, and data tampering...

PT-2026-96755

NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pickle.load without validation. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information...

Guardrails v0.24.1

NVIDIA NeMo Guardrails Library LATEST RELEASE / DEVELOPMENT VERSION : The develop branch tracks the latest top of tree development. The latest released version is 0.24.1. ✨✨✨ 📌 The official NeMo Guardrails library documentation is available atdocs.nvidia.com/nemo/guardrails. ✨✨✨ NVIDIA NeMo...

CVE-2026-71428 vulnerabilities

Vulnerabilities for packages: open-webui, nemo...

GHSA-4MVJ-M6J5-PMF7 vulnerabilities

Vulnerabilities for packages: open-webui, nemo...

CVE-2026-66393 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.13-sdk, apache-beam-python-3.11-sdk, label-studio, nemo, py3-nltk, apache-beam-python-3.12-sdk, open-webui, kubeflow-pipelines-visualization-server...