CVE-2026-24217
High · 8.8CVSS
8.8
EPSS
0.8%
Published
May 20, 2026
CISA due date
—
The record
NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-66152 A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor… CWE-29
- CVE-2026-10732 All versions of the package decompress are vulnerable to Arbitrary File Write via Archive… CWE-29
- CVE-2026-5627 A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and… CWE-29
- CVE-2025-15036 A path traversal vulnerability exists in the `extract_archive_to_dir` function within the… CWE-29
- CVE-2026-30828 Wallos is an open-source, self-hostable personal subscription tracker. CWE-29
- CVE-2025-66608 A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. CWE-29
- CVE-2024-2356 A Local File Inclusion (LFI) vulnerability exists in the '/reinstall_extension' endpoint… CWE-29
- CVE-2025-12790 A flaw was found in Rubygem MQTT. CWE-29