NVIDIA NeMo Framework Deserialization Vulnerability Leading to Remote Code Execution

A deserialization vulnerability allowing remote code execution has been identified in the NVIDIA NeMo Framework, affecting all platforms. This issue arises from the framework's handling of untrusted data, which could be exploited to execute arbitrary code and manipulate data.

Impact

Exploitation of this vulnerability could result in unauthorized code execution and unauthorized data modification.

Remediation

Users are advised to upgrade to the latest version of the NVIDIA NeMo Framework, available on the NVIDIA GitHub Releases page. For more information, visit the NVIDIA Product Security page.