VulnSocial

CVE-2025-33248PoC(nvidia / megatron-lm)

LOWCVSS 7.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

nvidia CVEsBack to dashboard
1.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-502

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • megatron-lm

Threat summary

  • Public PoC is present in monitored signal
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-03-24); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
nvidia
Products
megatron-lm

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-24: 1Mentions · 2026-03-25: 1PoC Mentioned / Linked · 2026-03-24: 1Technical Details · 2026-03-24: 1Technical Details · 2026-03-25: 103-2403-25
Signal classification2 categories
PoC
150.0%
Disclosure
150.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-241
PoC1
2026-03-251
Disclosure1
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2025-33248 Remote Code Execution in NVIDIA Megatron-LM Hybrid Conver... https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-33248 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2

    Post summary

    The post announces CVE-2025-33248, a Remote Code Execution flaw in NVIDIA Megatron-LM, but does not provide any PoC, exploit code, or patch information.

    0001083
    4.0K followersView on X
  • ThreatCluster@threatcluster
    PoC

    BREAKING: NVIDIA Megatron-LM hit by RCE bug CVE-2025-33248 as new code injection flaw CVE-2026-33336 emerges, both unpatched with public exploit PoCs under tracking. https://threatcluster.io/cluster/multiple-cves-discovered-in-nvidia-megatron-and-other-produc-21b60ff5

    Post summary

    Both CVE-2025-33248 and CVE-2026-33336 in NVIDIA Megatron-LM are unpatched and have publicly available PoCs, with no evidence of active exploitation reported.

    00000185
    115 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appnvidiamegatron-lm---

Explore more

Back to dashboardnvidia CVEsmegatron-lm vulnerabilities