CVE-2025-23349 | NVIDIA Megatron-LM nq.py code injection

September 24, 2025 Yanac

A vulnerability labeled as critical has been found in NVIDIA Megatron-LM. The impacted element is an unknown function of the file tasks/orqa/unsupervised/nq.py. Such manipulation leads to code injection.

This vulnerability is documented as CVE-2025-23349. The attack needs to be performed locally. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More