NVTabular: RCE via unsafe pickle deserialization
CVSS 7.8CVE-2026-24221NVIDIA / GPU stackcurated
Impact
RCE via unsafe pickle deserialization
Who can reach it
Malicious dataset artifact
What to do
Bump NVTabular; rebuild data images
References
Related entries
- NVTabular: RCE via insecure deserialization in data processingCVE-2026-24237 · NVTabularHigh
- NeMo Framework: RCE via unsafe object deserializationCVE-2026-24228 · NeMo FrameworkHigh
- TensorRT: Info disclosure / code exec (OOB read in tensor parsing)CVE-2026-24238 · TensorRTHigh
- Megatron-Bridge: RCE via unsafe deserialization of untrusted model and config artifactsCVE-2026-24240 · Megatron-BridgeHigh
- Megatron-Bridge: SSRF in file operationsCVE-2026-24242 · Megatron-BridgeHigh
- Megatron-Bridge: Validation bypass via incorrect type comparisonCVE-2026-24246 · Megatron-BridgeHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.