NVIDIA Megatron-LM checkpoint flaw allows code execution
Original title: ZDI-26-904: NVIDIA Megatron-LM Checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
Opening a malicious checkpoint file is required; ZDI rates CVE-2026-65110 at CVSS 7.8.
ZDI published ZDI-26-904, an untrusted-data deserialization flaw in NVIDIA Megatron-LM checkpoint handling. Remote attackers can execute arbitrary code if a user opens a malicious file. ZDI assigned CVE-2026-65110 and a CVSS score of 7.8. No affected versions, fix, or exploitation status is stated.
- Tracked as ZDI-26-904 and CVE-2026-65110.
- The issue is deserialization of untrusted checkpoint data.
- The target must open a malicious file.
- ZDI assigned a CVSS rating of 7.8.
Impact: Arbitrary code execution by opening a malicious checkpoint file
| Product | Affected |
|---|---|
| NVIDIA Megatron-LM | — |
- 1.Do not open untrusted Megatron-LM checkpoint files.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-65110 | Malicious checkpoint RCE in NVIDIA Megatron-LM | 7.8 | — |
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron-LM. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.