The vulnerability of the tasks/orqa/unsupervised/nq.py component in the NVIDIA Megatron-LM training library allows a perpetrator to execute arbitrary code, gain privileges, and disclose sensitive information.

The vulnerability of the tasks/orqa/unsupervised/nq.py component in the NVIDIA Megatron-LM training library involves incorrect code generation control. Exploiting this vulnerability allows attackers to execute arbitrary code, gain elevated privileges, and expose sensitive information...

CVE-2025-23349

CVE-2025-23349 affects NVIDIA Megatron-LM. The vulnerability exists in the tasks/orqa/unsupervised/nq.py component and can enable code injection, potentially leading to code execution, privilege escalation, information disclosure, and data tampering. Public documents consistently cite Megatron-LM...