CNNVD-202602-264 Information

CNNVD ID

CNNVD-202602-264

CVE-2026-24149

  • CNNVD Published: 2026-02-03

Description (Chinese)

NVIDIA Megatron-LM是美国英伟达(NVIDIA)公司的一个基于PyTorch 的分布式训练框架,专门用于训练大型Transformer语言模型。 NVIDIA Megatron-LM存在代码注入漏洞,该漏洞源于脚本存在代码注入问题,可能导致代码执行、权限提升、信息泄露或数据篡改。

Description (English)

NVIDIA Megatron-LM is a distributional training framework based on PyTorch, Inc. of the United States of America, dedicated to training large Transformer language models. NVIDIA Megatron-LM has a code-infusion loophole, which stems from a code-in problem with scripts, which may lead to code execution, power enhancement, information leak or data manipulation.

Hazard Level

High

Vulnerability Type

代码注入

Affected Vendor

英伟达

Published

2026-02-03

Last Modified

2026-02-24

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24149 https://www.cve.org/CVERecord?id=CVE-2026-24149

Patch

https://www.nvidia.com/en-us/

Share on: