NVIDIA Megatron-LM for all platforms 包含一个脚本中的漏洞，攻击者创建的恶意数据可能导致代码注入问题。成功利用此漏洞可能

The impact of this vulnerability is significant. Successful exploitation allows an attacker to execute arbitrary code within the context of the Megatron-LM process. This could lead to complete system compromise, including privilege escalation to gain root access, data exfiltration of sensitive training data or model weights, and modification of the model itself. Given Megatron-LM's use in training large language models, the potential for data tampering could have far-reaching consequences, impacting the integrity and reliability of the resulting AI models. The ability to execute arbitrary code opens the door to a wide range of malicious activities, including installing backdoors, launching denial-of-service attacks, and pivoting to other systems on the network.

Organizations and researchers utilizing NVIDIA Megatron-LM for large language model training are at risk. This includes those deploying Megatron-LM in cloud environments, on-premise servers, or within development pipelines. Specifically, those using older, unpatched versions (0.0 - 0.14.0) are particularly vulnerable.

• python / supply-chain:

import os
import subprocess

def check_megatron_version():
    try:
        result = subprocess.check_output(['python', '-c', 'import megatron_lm; print(megatron_lm.__version__)'], stderr=subprocess.STDOUT)
        version = result.decode('utf-8').strip()
        if float(version) < 0.14:
            print(f"Vulnerability detected: Megatron-LM version is {version}, upgrade required.")
        else:
            print(f"Megatron-LM version is {version}, no vulnerability detected.")
    except FileNotFoundError:
        print("Megatron-LM not found.")
    except Exception as e:
        print(f"Error checking version: {e}")

check_megatron_version()

1. 2026-02-03Disclosure

   disclosure

1. 已保留2026-01-21
2. 发布日期2026-02-03
3. EPSS 更新日期2026-03-23

The primary mitigation for CVE-2026-24149 is to upgrade to NVIDIA Megatron-LM version 0.14.0 or later, which contains the fix. If upgrading is not immediately feasible, consider implementing input validation and sanitization on any data processed by the vulnerable script. Specifically, carefully scrutinize all user-provided input and reject any data that appears suspicious or malformed. While not a direct fix, restricting network access to the Megatron-LM process can limit the potential impact of a successful exploit. Monitor system logs for unusual activity, particularly processes executing from unexpected locations or with elevated privileges.