The vulnerability is a path traversal flaw in NVIDIA BioNeMo Core for Linux that permits a malicious file to be loaded from an arbitrary location. Classified as CWE‑29, this weakness can lead to code execution, denial of service, information disclosure, and data tampering.

All installations of NVIDIA BioNeMo Core for Linux are potentially affected. Specific version details were not provided, so any unpatched instance may be vulnerable.

The CVSS score of 8.8 indicates high severity, but no EPSS score is available and the flaw is not listed in CISA's KEV catalog. Based on the description, it is inferred that an attacker must be able to influence the file‑loading mechanism of the application; if the component is exposed to external input such as a user‑visible interface or an API, exploitation could be possible remotely. The required privilege level or attack vector is not explicitly stated, so the risk depends on how the application handles file paths. If the attacker can supply a crafted path, they may traverse directories, load malicious code, or overwrite critical files, thereby achieving remote code execution, disrupting service, or compromising sensitive data.