nemo-toolkit
A scalable generative AI framework built for researchers and developers working on Large Language Models, Multimodal, and Speech AI (Automatic Speech Recognition and Text-to-Speech)
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 109
- Cadence
- ~17 days
- Last 12 months
- 13
Reach
- Stars
- 18.1k
Details
- License
- custom
- First release
- Sep 19, 2019
| Version | Released | |
|---|---|---|
3.0.0
major
| ||
2.7.3
patch
| ||
2.7.2
patch
| ||
2.7.1
patch
| ||
2.7.0
minor
| ||
2.6.2
patch
| ||
2.6.1
patch
2 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.6.0
minor
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.6.0rc0
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.5.3
patch
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.5.2
patch
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.5.1
patch
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.5.0
minor
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.4.1
patch
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.3.3
patch
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.5.0rc0
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.4.0
minor
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.4.0rc2
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.3.2
patch
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.4.0rc1
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.4.0rc0
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.3.1
patch
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.3.0
minor
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.3.0rc4
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.3.0rc3
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.3.0rc2
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.2.1
patch
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.2.0
minor
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.2.0rc3
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.2.0rc2
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.2.0rc1
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.2.0rc0
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.1.0
minor
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.1.0rc2
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.1.0rc1
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.1.0rc0
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.0.0
major
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.0.0rc1
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.0.0rc0
pre
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.23.0
minor
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.22.0
minor
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.21.0
minor
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.20.0
minor
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.19.1
patch
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.19.0
minor
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.18.1
patch
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.18.0
minor
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.17.0
minor
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.16.0
minor
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.15.0
minor
4 CVEs
CVE-2026-24157
PYSEC-2026-2674
GHSA-m4jw-wgmf-889x
Jul 13, 2026
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24159
PYSEC-2026-2675
GHSA-v7v2-m736-cf3c
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 91 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
2.6.1
Fixed in
2.6.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33253
PYSEC-2026-2673
GHSA-hvjw-vp7g-39h5
Jul 13, 2026
NVIDIA NeMo Framework Deserializes Untrusted Data
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2025-33245
PYSEC-2026-2672
GHSA-9379-mwvr-7wxx
Jul 13, 2026
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
8.0
/ 10
High
Network
Low
Low
Required
Unchanged
High
High
High
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Affected versions
0.10.0
0.10.0b0
0.10.0b1
0.10.0b10
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
+ 90 more Show less
0.10.1
0.11.0
0.11.0b1
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.8
0.8.1
0.8.2
0.9.0
1.0.0
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.1
1.0.2
1.1.0
1.10.0
1.11.0
1.12.0
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0
1.18.0
1.18.1
1.19.0
1.19.1
1.2.0
1.20.0
1.21.0
1.22.0
1.23.0
1.3.0
1.4.0
1.5.0
1.5.1
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.9.0
2.0.0
2.0.0rc0
2.0.0rc1
2.1.0
2.1.0rc0
2.1.0rc1
2.1.0rc2
2.2.0
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.1
2.3.0
2.3.0rc2
2.3.0rc3
2.3.0rc4
2.3.1
2.3.2
2.3.3
2.4.0
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.1
2.5.0
2.5.0rc0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.0rc0
Fixed in
2.6.1
References Updated Jul 13, 2026 · Source: OSV.dev |