NVIDIA Megatron‑LM contains a flaw in the checkpoint loading routine that allows an attacker to trigger arbitrary code execution by prompting a user to load a specially crafted checkpoint file. The vulnerability is described as a deserialization issue, which could lead to code execution, privilege escalation, information disclosure, and data tampering.

The vulnerability affects NVIDIA Megatron‑LM. No specific version range is listed in the CNA data, so any installation of Megatron‑LM that includes the checkpoint loading feature is potentially vulnerable until a patch is applied.

The CVSS score of 7.8 indicates a high severity. EPSS information is not available, so the likelihood of exploitation cannot be precisely quantified at this time, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is likely local or through a social‑engineering attempt, as the attacker must convince a user to load a malicious file. Successful exploitation would give the attacker remote code execution capabilities on the host system.