CVE-2026-24217: NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of this…

high8.8CVSS 3.1

AVNACLPRNUIRSUCHIHAH

NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
nvidia	bionemo_framework	< commit dfd83a7 on main	commit dfd83a7 on main
nvidia	bionemo_framework	< 2026-04-03	2026-04-03