NVIDIA Megatron-LM voor alle platforms bevat een kwetsbaarheid in de tasks/orqa/unsupervised/nq.py component, waarbij een aanvaller code-injectie kan veroorzaken. Een succesvolle exploit van deze kwetsbaarheid m

The vulnerability resides within the tasks/orqa/unsupervised/nq.py component of Megatron-LM. An attacker who can manipulate input to this component can inject malicious code, potentially gaining control of the system running Megatron-LM. This could involve executing arbitrary commands, accessing sensitive data used in model training, modifying training data to influence model behavior, or escalating privileges to access other resources on the system. The impact is particularly severe in environments where Megatron-LM is used for sensitive data processing or critical infrastructure.

Organizations and researchers utilizing NVIDIA Megatron-LM for large language model training, particularly those running older versions (prior to 0.13.1 and 0.12.3) in production environments or development labs. Environments with limited access controls or inadequate input validation are at higher risk.

• python / code-injection:

import os
import subprocess

def check_megatron_version():
    try:
        result = subprocess.check_output(['python', '-c', 'import megatron_lm; print(megatron_lm.__version__)'], stderr=subprocess.STDOUT)
        version = result.decode('utf-8').strip()
        if version.startswith('0.12') or version.startswith('0.13'):
            print(f"Vulnerable version detected: {version}")
        else:
            print(f"Safe version detected: {version}")
    except FileNotFoundError:
        print("Megatron-LM not found.")
    except subprocess.CalledProcessError as e:
        print(f"Error checking version: {e}")

check_megatron_version()

1. 2025-09-24Disclosure

   disclosure

1. Gereserveerd2025-01-14
2. Gepubliceerd2025-09-24
3. EPSS bijgewerkt2026-03-23

The primary mitigation is to upgrade to NVIDIA Megatron-LM version 0.13.1 or later, which contains the fix. If immediate upgrading is not possible, consider isolating instances running vulnerable versions of Megatron-LM to limit the potential blast radius. Review and restrict access to the tasks/orqa/unsupervised/nq.py component. Implement input validation and sanitization to prevent malicious code injection attempts. Monitor system logs for suspicious activity related to Megatron-LM processes.