The vulnerability in NVIDIA Megatron Bridge allows the deserialization of untrusted data, which can lead to code execution, data tampering, and information disclosure. This flaw is a classic example of insecure deserialization, classified as CWE‑502. Attackers who can trigger the deserialization path may gain the ability to execute arbitrary code, modify stored data, or exfiltrate sensitive information from the system.

The affected product is NVIDIA Megatron Bridge. No specific version information is listed, so any release that does not contain the mitigation is presumed vulnerable. Administrators should verify the version of Megatron Bridge in use and compare it against vendor advisories for known fixes.

The CVSS score of 7.8 indicates a high risk, though the EPSS score is not available, preventing an exact exploitation probability assessment. The flaw is not included in the CISA KEV catalog. The description does not specify the attack vector, but the issue involves deserialization of untrusted data, implying that the attacker must supply malicious input to a processing endpoint or exploit a remote service that performs deserialization. No additional exploitation prerequisites are detailed in the advisory.