CVE-2026-65178(nvidia / nemo_speech)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

NVIDIA NeMo contains a vulnerability in its dataset-loading workflow where a maliciously crafted model_config.yaml can inject unsafe parameters. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information disclosure.

nvidia CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/NVIDIA/product-security/tree/main/2026/5885

Vendor / third-party advisories

https://www.cve.org/CVERecord?id=CVE-2026-65178

Other references

https://nvd.nist.gov/vuln/detail/CVE-2026-65178

Weakness type (CWE)

CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

nemo_speech

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Affected systems

Vendors

nvidia

Products

nemo_speech

Deep dive

Activity timeline1 mentions / 1d

Full discourse1 post

DFIR Lab@DFIR_Lab2d
🚨 HIGH: CVE-2026-65178 (CVSS 7.8) NVIDIA NeMo vulnerable to unsafe deserialization via crafted model_config.yaml. Exploited locally → code execution, data tampering, DoS. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/7jKkEGkDxM
0000029
142 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	nvidia	nemo_speech	-	-	-

Explore more

Back to dashboard nvidia CVEs nemo_speech vulnerabilities