NVIDIA Megatron Bridge YAML parsing bug enables code execution
CVE-2026-24250 requires a user to open a malicious file or page; ZDI rates it CVSS 7.8.
2 stories, newest first · one card per story
CVE-2026-24250 requires a user to open a malicious file or page; ZDI rates it CVSS 7.8.
NVIDIA Megatron Bridge load_model_config code injection flaw (CVE-2026-24251, CVSS 7.8) enables remote arbitrary code execution on affected installs.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views