NVTabular: RCE via insecure deserialization in data processing
CVSS 7.8CVE-2026-24237NVIDIA / GPU stackcurated
Impact
RCE via insecure deserialization in data processing
Who can reach it
Malicious dataset artifact
What to do
Bump NVTabular; rebuild data images
References
Related entries
- NVTabular: RCE via unsafe pickle deserializationCVE-2026-24221 · NVTabularHigh
- TensorRT: Info disclosure / code exec (OOB read in tensor parsing)CVE-2026-24238 · TensorRTHigh
- Megatron-Bridge: RCE via unsafe deserialization of untrusted model and config artifactsCVE-2026-24240 · Megatron-BridgeHigh
- Megatron-Bridge: SSRF in file operationsCVE-2026-24242 · Megatron-BridgeHigh
- Megatron-Bridge: Validation bypass via incorrect type comparisonCVE-2026-24246 · Megatron-BridgeHigh
- Megatron-Bridge: RCE via unsafe evaluation of loaded configCVE-2026-24249 · Megatron-BridgeHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.