NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

CVE-2026-61752 is a deserialization of untrusted data vulnerability affecting NVIDIA Megatron Bridge. An attacker who successfully exploits this vulnerability could achieve remote code execution, data tampering, and information disclosure. The vulnerability is currently undergoing analysis by NVD. NVIDIA has published an advisory via their product-security GitHub repository. The flaw is classified as high criticality given its potential for full system compromise. Deserialization vulnerabilities are commonly exploited in attacks targeting AI/ML infrastructure and enterprise software. Users of NVIDIA Megatron Bridge are advised to monitor NVIDIA's security advisories for patches and mitigations.