NVIDIA BioNeMo Core Path Traversal Vulnerability Leading to Code Execution and Data Compromise

A path traversal vulnerability has been identified in NVIDIA BioNeMo Core for Linux. This issue allows users to load malicious files, potentially leading to unauthorized code execution, denial of service, information disclosure, and data tampering. The vulnerability affects versions prior to a specific commit in the main branch.

Impact

Exploitation of this vulnerability could result in arbitrary code execution, a denial-of-service condition, unauthorized information disclosure, and unauthorized data modification.