CVE-2026-24155: NVIDIA NeMo Framework for all platforms contains a code injection vulnerability

Synopsis

A code injection vulnerability affects NVIDIA NeMo Framework versions 0.0 through 2.7.2 on all platforms. The flaw is reachable locally by any low-privilege account, requires no victim interaction, and is reliable to exploit. Successful exploitation gives an attacker full code execution on the host, the ability to escalate privileges, read sensitive data, and tamper with stored data. HarborGuard is tracking this advisory and will make a patched-image rebuild available the moment NVIDIA publishes a fix.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; no network path to the service is required.

• AuthenticationRequired

  Any low-privilege local account is sufficient; no elevated or administrative credentials are needed.

• Victim interactionNot required

  No user action is needed; the attacker can trigger the injection without involving any other account or session.

• Attack complexityDetail

  The exploit is reliable and condition-free, with no race conditions or special environmental factors required.

Blast Radius

• Executes arbitrary code in the context of the NeMo Framework process, allowing the attacker to run commands on the host.
• Escalates privileges beyond the initial low-privilege account, potentially gaining control of the host or container runtime.
• Reads confidential data accessible to the process, including model weights, training datasets, credentials, and environment variables.
• Modifies or destroys persisted data, including model checkpoints, experiment results, and configuration files.