PYSEC-2026-2674
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/nemo-toolkit/PYSEC-2026-2674.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-2674
- Aliases
-
- CVE-2026-24157
- GHSA-m4jw-wgmf-889x
- Published
- 2026-07-13T14:36:44.629509Z
- Modified
- 2026-07-13T16:32:48.197483531Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
- Details
-
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.
- References
Affected packages
PyPI / nemo-toolkit
Package
- Name
- nemo-toolkit
- View open source insights on deps.dev
- Purl
- pkg:pypi/nemo-toolkit
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.6.2
Affected versions
0.*
0.8
0.8.1
0.8.2
0.9.0
0.10.0b0
0.10.0b1
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
0.10.0b10
0.10.0
0.10.1
0.11.0b1
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0
1.*
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.0
1.0.1
1.0.2
1.1.0
1.2.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.20.0
1.21.0
1.22.0
1.23.0
2.*
2.0.0rc0
2.0.0rc1
2.0.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.1.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.0
2.2.1
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.0
2.3.1
2.3.2
2.3.3
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.0
2.4.1
2.5.0rc0
2.5.0
2.5.1
2.5.2
2.5.3
2.6.0rc0
2.6.0
2.6.1