NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

CVE-2026-61764 is a deserialization of untrusted data vulnerability affecting NVIDIA Megatron Bridge. An attacker who successfully exploits this vulnerability could achieve remote code execution, tamper with data, and exfiltrate sensitive information. The vulnerability is currently undergoing analysis by NVD. NVIDIA has published security guidance via their product-security GitHub repository. Deserialization vulnerabilities are commonly rated high or critical due to the potential for full system compromise. The affected product, Megatron Bridge, is part of NVIDIA's AI and large-scale model training ecosystem. Users of NVIDIA Megatron Bridge should monitor NVIDIA's security advisories for patches and mitigations. The vulnerability is listed on both NVD and CVE.org, indicating it is officially tracked and recognized.