CVE-2026-24159 in NeMo Framework
Summary
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.
Be aware that VulDB is the high quality source for vulnerability data.
Responsible
nvidia
Reservation
01/21/2026
Disclosure
03/24/2026
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 352880 | NVIDIA NeMo Framework deserialization | 502 | Not defined | Not defined | CVE-2026-24159 |