CVE-2026-65110
Received Received - Intake

Remote Code Execution in NVIDIA Megatron-LM

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: NVIDIA Corporation

Description
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-65110
EUVD
EUVD-2026-98562

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
NVIDIA Megatron-LM 0 to 17

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

NVIDIA Megatron-LM has a vulnerability where an attacker could execute arbitrary code by tricking a user into loading a specially crafted file. This could lead to code execution, privilege escalation, data leaks, or tampering with data.

Detection Guidance

Detecting this vulnerability requires monitoring for suspicious checkpoint files in NVIDIA Megatron-LM. Check for unexpected file loads or modifications in directories where Megatron-LM operates. Use file integrity tools to compare known-good checkpoint files against current versions.

Impact Analysis

If exploited, this vulnerability could allow attackers to run malicious code on your system, gain higher privileges, steal sensitive information, or alter data. It primarily affects users who load untrusted checkpoint files in NVIDIA Megatron-LM.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR (data protection) and HIPAA (health data privacy) by exposing sensitive information or allowing data tampering.

Mitigation Strategies

Immediately stop using untrusted checkpoint files. Verify the integrity of existing checkpoints using checksums provided by NVIDIA. Update Megatron-LM to the latest patched version if available. Restrict file access permissions to prevent unauthorized modifications.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-65110. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart