NVIDIA Megatron-LM for all platforms 包含一个漏洞，存在于 tasks/orqa/unsupervised/nq.py 组件中，攻击者可能导致代码注入。成功利用此漏洞可能

The vulnerability resides within the tasks/orqa/unsupervised/nq.py component of Megatron-LM. An attacker who can manipulate input to this component can inject malicious code, potentially gaining control of the system running Megatron-LM. This could involve executing arbitrary commands, accessing sensitive data used in model training, modifying training data to influence model behavior, or escalating privileges to access other resources on the system. The impact is particularly severe in environments where Megatron-LM is used for sensitive data processing or critical infrastructure.

Organizations and researchers utilizing NVIDIA Megatron-LM for large language model training, particularly those running older versions (prior to 0.13.1 and 0.12.3) in production environments or development labs. Environments with limited access controls or inadequate input validation are at higher risk.

• python / code-injection:

import os
import subprocess

def check_megatron_version():
    try:
        result = subprocess.check_output(['python', '-c', 'import megatron_lm; print(megatron_lm.__version__)'], stderr=subprocess.STDOUT)
        version = result.decode('utf-8').strip()
        if version.startswith('0.12') or version.startswith('0.13'):
            print(f"Vulnerable version detected: {version}")
        else:
            print(f"Safe version detected: {version}")
    except FileNotFoundError:
        print("Megatron-LM not found.")
    except subprocess.CalledProcessError as e:
        print(f"Error checking version: {e}")

check_megatron_version()

1. 2025-09-24Disclosure

   disclosure

1. 已保留2025-01-14
2. 发布日期2025-09-24
3. EPSS 更新日期2026-03-23

The primary mitigation is to upgrade to NVIDIA Megatron-LM version 0.13.1 or later, which contains the fix. If immediate upgrading is not possible, consider isolating instances running vulnerable versions of Megatron-LM to limit the potential blast radius. Review and restrict access to the tasks/orqa/unsupervised/nq.py component. Implement input validation and sanitization to prevent malicious code injection attempts. Monitor system logs for suspicious activity related to Megatron-LM processes.