NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
References
| Link | Resource |
|---|---|
| https://nvd.nist.gov/vuln/detail/CVE-2026-24217 | US Government Resource |
| https://nvidia.custhelp.com/app/answers/detail/a_id/5831 | Vendor Advisory |
| https://www.cve.org/CVERecord?id=CVE-2026-24217 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 May 2026, 20:08
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux linux Kernel
Nvidia Linux Nvidia bionemo Framework |
|
| CPE | cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:a:nvidia:bionemo_framework:*:*:*:*:*:*:*:* |
|
| References | () https://nvd.nist.gov/vuln/detail/CVE-2026-24217 - US Government Resource | |
| References | () https://nvidia.custhelp.com/app/answers/detail/a_id/5831 - Vendor Advisory | |
| References | () https://www.cve.org/CVERecord?id=CVE-2026-24217 - Third Party Advisory |
20 May 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-20 20:16
Updated : 2026-05-21 20:08
NVD link : CVE-2026-24217
Mitre link : CVE-2026-24217
CVE.ORG link : CVE-2026-24217
JSON object : View
Products Affected
nvidia
- bionemo_framework
linux
- linux_kernel
CWE
CWE-29
Path Traversal: '\..\filename'