NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution

CRITICAL 9.8CVE-2026-24159 · GHSA-v7v2-m736-cf3c · PYSEC-2026-2675 · Published 24/03/2026 · updated 17/06/2026

Package	Affected versions	Patched versions
nemo-toolkit PyPI	`< 2.6.2`	`2.6.2`
nemo nvidia	`< 2.6.2`	`2.6.2`

Description

NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2026-24159 · ADVISORY
NVIDIA-NeMo/NeMo · PACKAGE
nvidia.custhelp.com/app/answers/detail/a_id/5800 · WEB
cve.org/CVERecord · WEB
pypi.org/project/nemo-toolkit · PACKAGE
GitHub Advisory GHSA-v7v2-m736-cf3c · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free