BioNeMo Framework: RCE via insecure deserialization on model load

CVSS 7.8CVE-2026-24216NVIDIA / GPU stackcurated

Impact

RCE via insecure deserialization on model load

Who can reach it

Malicious model

What to do

Bump BioNeMo; rebuild images

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24216 https://github.com/NVIDIA/product-security/tree/main/2026/5831

Related entries

BioNeMo Framework: Remote RCE via untrusted serializationCVE-2026-24164 · BioNeMo FrameworkHigh
BioNeMo Framework: Arbitrary file read/write via path traversalCVE-2026-24217 · BioNeMo FrameworkHigh
BioNeMo Framework: RCE via malicious pickled dataCVE-2026-24165 · BioNeMo FrameworkHigh
NVTabular: RCE via unsafe pickle deserializationCVE-2026-24221 · NVTabularHigh
NeMo Framework: RCE via unsafe object deserializationCVE-2026-24228 · NeMo FrameworkHigh
NVTabular: RCE via insecure deserialization in data processingCVE-2026-24237 · NVTabularHigh

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.