NVIDIA Megatron Bridge YAML File Parsing Code Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24250.
Read at Zero Day Initiative published advisories
- Vendor
- NVIDIA
- Product
- NVIDIA drivers / Container Toolkit / Triton
- CVSS
- 7.8
- Exposure class
- AI infrastructure
Why it ranks 15 (Routine)
- CVSS 7.8 high
- Product class: AI infrastructure
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Zero Day Initiative published advisories (zerodayinitiative.com)
- CVE-2026-24250 on this site · NVD · CVE.org · Vulnpedia