The vulnerability results from deserialization of data that is not trusted by NVIDIA BioNeMo. If an attacker supplies specially crafted input, the deserialization routine may execute arbitrary code, leading to code execution, denial of service, information disclosure, or data tampering. The worst‑case outcome is that an attacker gains full control over the affected system.

The vulnerability affects the NVIDIA BioNeMo Framework for Linux. No specific permissive versions are enumerated in the public data; it applies to the current distributed release of the framework.

The CVSS score of 7.8 signals high severity, indicating that exploitation could have critical impacts. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog. Based on the description, it is inferred that the attack vector relies on the supply of untrusted data to BioNeMo’s deserialization routines, potentially requiring local privileges or a remote channel that can deliver such data to the framework.