NVIDIA BioNeMo Framework has a deserialization flaw that allows an attacker to supply malicious data that the software will process during deserialization. This weakness can enable the attacker to execute arbitrary code on the system, crash the application, leak sensitive information, or modify data stored by the framework.

The vulnerability affects the NVIDIA BioNeMo Framework; version information is not specified, so all deployed instances of this product are considered at risk.

The CVSS score of 8.8 indicates a high severity and reflects the destructive impact of a successful exploit. The EPSS score of less than 1 per cent suggests a low likelihood of widespread exploitation so far, and the vulnerability is not listed in CISA’s KEV catalog. However, because the flaw involves deserialization of untrusted data, an attacker who can influence the data stream—either locally or remotely if the framework exposes endpoints—may be able to trigger the vulnerability. The attack requires the attacker to provide crafted input, which is feasible if the application accepts data from external sources or if an insider can inject payloads.