Vulnerability Database

309,237

Total vulnerabilities in the database

CVE-2025-23354

NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data tampering.

  • Published: Sep 24, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-23354
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
nvidia / megatron-lm - 0.12.3
nvidia / megatron-lm 0.13.0 0.13.0.x
nvidia / megatron-lm 0.13.0-rc0 0.13.0-rc0.x
nvidia / megatron-lm 0.13.0-rc1 0.13.0-rc1.x
nvidia / megatron-lm 0.13.0-rc2 0.13.0-rc2.x
nvidia / megatron-lm 0.13.0-rc3 0.13.0-rc3.x
nvidia / megatron-lm 0.13.0-rc4 0.13.0-rc4.x