Megatron-Bridge: SSRF in file operations
CVSS 7.8CVE-2026-24242NVIDIA / GPU stackcurated
Impact
SSRF in file operations
Who can reach it
Tenant-supplied checkpoint URI
What to do
Bump Megatron-Bridge; add egress policy
References
Related entries
- Megatron-Bridge: Validation bypass via incorrect type comparisonCVE-2026-24246 · Megatron-BridgeHigh
- Megatron-Bridge: RCE via unsafe evaluation of loaded configCVE-2026-24249 · Megatron-BridgeHigh
- Megatron-Bridge: code injection via malicious input in the data merging and data shuffling tutorialsCVE-2025-33239 · Megatron-BridgeHigh
- Megatron-Bridge: RCE via unsafe deserialization of untrusted model and config artifactsCVE-2026-24240 · Megatron-BridgeHigh
- NeMo Framework: Command injection in script processingCVE-2026-24250 · NeMo FrameworkHigh
- NVIDIA NeMo Framework: OS command injection reaches code execution with the job's privilegesCVE-2026-24252 · NVIDIA NeMo FrameworkHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.