CVE-2026-24150

NVIDIA Megatron-LM is affected by CVE-2026-24150, a remote code execution vulnerability occurring during checkpoint loading. An attacker can exploit this by convincing a user to load a maliciously crafted file. This high-severity flaw (CVSS 7.8) requires user interaction and local access but has low attack complexity, potentially leading to code execution, privilege escalation, information disclosure, and data tampering. There is currently no evidence of active exploitation, and public exploit code is not available, with community discussion remaining minimal.