CVE-2026-24162
HIGH EPSS 33.4%
Published May 26, 20261mo ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
Published May 26, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago
Description
NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
33.4% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-502 Deserialization of Untrusted Data Validation
Affected Products 2
References 3
- nvd.nist.gov https://nvd.nist.gov/vuln/detail/CVE-2026-24162
- nvidia.custhelp.com https://nvidia.custhelp.com/app/answers/detail/a_id/5838
- cve.org https://www.cve.org/CVERecord?id=CVE-2026-24162
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.