BioNeMo Framework: RCE via malicious pickled data

CVSS 7.8CVE-2026-24165NVIDIA / GPU stackcurated

Impact

RCE via malicious pickled data

Who can reach it

Malicious model artifact

What to do

Bump BioNeMo; rebuild images

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24165 https://github.com/NVIDIA/product-security/tree/main/2026/5808

Related entries

BioNeMo Framework: RCE via insecure deserialization on model loadCVE-2026-24216 · BioNeMo FrameworkHigh
BioNeMo Framework: Remote RCE via untrusted serializationCVE-2026-24164 · BioNeMo FrameworkHigh
BioNeMo Framework: Arbitrary file read/write via path traversalCVE-2026-24217 · BioNeMo FrameworkHigh
NVIDIA Cumulus Linux: Improper privilege management in the user-management component lets an unprivileged switch userCVE-2026-24183 · NVIDIA Cumulus LinuxHigh
GPU Display Driver: Local privesc (insufficient permission checks)CVE-2026-24190 · GPU Display DriverHigh
GPU Display Driver: Local privesc (synchronization issue)CVE-2026-24191 · GPU Display DriverHigh

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.