CVE-2026-65104 PUBLISHED

Assigner: nvidia
Reserved: 21.07.2026 Published: 13.10.2026 Updated: 13.10.2026

NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N
CVSS Score: 7.1

Product Status

Vendor NVIDIA
Product Megatron-LM
Versions Default: unaffected
  • Version 0 to 17 is affected

References

Problem Types

  • CWE-328 Use of Weak Hash CWE

Impacts

  • data tampering, information disclosure