NVIDIA Megatron-LM for all platforms には、スクリプトに脆弱性が存在し、攻撃者によって作成された悪意のあるデータにより、コードインジェクションの問題が発生する可能性があります。この脆弱性の悪用により、

The impact of this vulnerability is significant. Successful exploitation allows an attacker to execute arbitrary code within the context of the Megatron-LM process. This could lead to complete system compromise, including privilege escalation to gain root access, data exfiltration of sensitive training data or model weights, and modification of the model itself. Given Megatron-LM's use in training large language models, the potential for data tampering could have far-reaching consequences, impacting the integrity and reliability of the resulting AI models. The ability to execute arbitrary code opens the door to a wide range of malicious activities, including installing backdoors, launching denial-of-service attacks, and pivoting to other systems on the network.

Organizations and researchers utilizing NVIDIA Megatron-LM for large language model training are at risk. This includes those deploying Megatron-LM in cloud environments, on-premise servers, or within development pipelines. Specifically, those using older, unpatched versions (0.0 - 0.14.0) are particularly vulnerable.

• python / supply-chain:

import os
import subprocess

def check_megatron_version():
    try:
        result = subprocess.check_output(['python', '-c', 'import megatron_lm; print(megatron_lm.__version__)'], stderr=subprocess.STDOUT)
        version = result.decode('utf-8').strip()
        if float(version) < 0.14:
            print(f"Vulnerability detected: Megatron-LM version is {version}, upgrade required.")
        else:
            print(f"Megatron-LM version is {version}, no vulnerability detected.")
    except FileNotFoundError:
        print("Megatron-LM not found.")
    except Exception as e:
        print(f"Error checking version: {e}")

check_megatron_version()

1. 2026-02-03Disclosure

   disclosure

1. 予約済み2026-01-21
2. 公開日2026-02-03
3. EPSS 更新日2026-03-23

The primary mitigation for CVE-2026-24149 is to upgrade to NVIDIA Megatron-LM version 0.14.0 or later, which contains the fix. If upgrading is not immediately feasible, consider implementing input validation and sanitization on any data processed by the vulnerable script. Specifically, carefully scrutinize all user-provided input and reject any data that appears suspicious or malformed. While not a direct fix, restricting network access to the Megatron-LM process can limit the potential impact of a successful exploit. Monitor system logs for unusual activity, particularly processes executing from unexpected locations or with elevated privileges.