BioNeMo Framework: Arbitrary file read/write via path traversal
CVSS 8.8CVE-2026-24217NVIDIA / GPU stackcurated
Impact
Arbitrary file read/write via path traversal
Who can reach it
Malicious model archive
What to do
Bump BioNeMo; rebuild images
References
Related entries
- BioNeMo Framework: RCE via malicious pickled dataCVE-2026-24165 · BioNeMo FrameworkHigh
- BioNeMo Framework: RCE via insecure deserialization on model loadCVE-2026-24216 · BioNeMo FrameworkHigh
- BioNeMo Framework: Remote RCE via untrusted serializationCVE-2026-24164 · BioNeMo FrameworkHigh
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): Memory is handed to a consumer without beingCVE-2026-53374 · Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu)High
- Linux kernel amdgpu kernel driver core (drm/amdgpu/vce): A correctness defect in the amdgpu kernel driver coreCVE-2026-53375 · Linux kernel amdgpu kernel driver core (drm/amdgpu/vce)High
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vce1): An out-of-bounds access in the amdgpuCVE-2026-64516 · Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vce1)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.