CVE-2026-24216
published 2026-05-20CVE-2026-24216: NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability…
PriorityP338high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.29%
21.0th percentile
NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nvidia | bionemo_framework | < commit dfd83a7 in Main | commit dfd83a7 in Main |
| nvidia | bionemo_framework | < 2026-04-03 | 2026-04-03 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
NVIDIA BioNeMo Framework on Linux deserialization
vuldb·2026-05-20·CVSS 7.8
CVE-2026-24216 [HIGH] NVIDIA BioNeMo Framework on Linux deserialization
A vulnerability was found in NVIDIA BioNeMo Framework on Linux. It has been declared as critical. Impacted is an unknown function. Executing a manipulation can lead to deserialization.
This vulnerability is registered as CVE-2026-24216. The attack needs to be launched locally. No exploit is available.
GHSA
GHSA-mfc6-w69g-6wj5: NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data
ghsa_unreviewed·2026-05-20
CVE-2026-24216 [HIGH] CWE-502 GHSA-mfc6-w69g-6wj5: NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data
NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-05-20
Published