Unrated severityNVD Advisory· Published Aug 13, 2025· Updated Aug 13, 2025
CVE-2025-23306
CVE-2025-23306
Description
NVIDIA Megatron-LM for all platforms contains a vulnerability in the megatron/training/ arguments.py component where an attacker could cause a code injection issue by providing a malicious input. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Affected products
2- NVIDIA/Megatron-LMv5Range: All versions prior to 0.12.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.