{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-03T12:14:27.417","vulnerabilities":[{"cve":{"id":"CVE-2025-23306","sourceIdentifier":"psirt@nvidia.com","published":"2025-08-13T18:15:30.387","lastModified":"2026-06-17T08:53:22.400","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"NVIDIA Megatron-LM for all platforms contains a vulnerability in the megatron/training/\narguments.py component where an attacker could cause a code injection issue by providing a malicious input. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering."},{"lang":"es","value":"NVIDIA Megatron-LM para todas las plataformas contiene una vulnerabilidad en el componente megatron/training/arguments.py que permite a un atacante causar un problema de inyección de código al proporcionar una entrada maliciosa. Una explotación exitosa de esta vulnerabilidad puede provocar la ejecución de código, la escalada de privilegios, la divulgación de información y la manipulación de datos."}],"affected":[{"source":"psirt@nvidia.com","affectedData":[{"vendor":"NVIDIA","product":"Megatron-LM","defaultStatus":"unaffected","platforms":["All platforms"],"versions":[{"version":"All versions prior to 0.12.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@nvidia.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-13T17:58:45.828137Z","id":"CVE-2025-23306","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@nvidia.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:megatron-lm:*:*:*:*:*:*:*:*","versionEndExcluding":"0.12.2","matchCriteriaId":"5DCE9E29-E9C4-449E-B916-4C16C45E5F94"}]}]}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23306","source":"psirt@nvidia.com","tags":["Technical Description"]},{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5685","source":"psirt@nvidia.com","tags":["Vendor Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-23306","source":"psirt@nvidia.com","tags":["Technical Description"]}]}}]}