High severity · published Jul 1, 2026
CVE-2026-24250
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper validation of allowed inputs
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper validation of allowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ME
Megatron-Bridge · NVIDIA
Versions 0.0 to 0.4.0 · source: vendor
NM
Nemo Megatron Bridge · Nvidia
before 0.4.1 · source: NVD
In the news
VulnerabilityHigh
ZDI-26-787: NVIDIA Megatron Bridge YAML File Parsing Code Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24250.
Oct 22, 2026·Zero Day Initiative
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-24250
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-24250
Product
https://github.com/NVIDIA/product-security/tree/main/2026/5841
Third Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-24250
Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-24250
More from Megatron-Bridge
7.8
CVE-2026-61769
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data
7.8
CVE-2026-61777
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data
7.8
CVE-2026-61778
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data
7.8
CVE-2026-61779
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data
7.8
CVE-2026-61770
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data