NVIDIA AI Software Vulnerabilities and Patches March 2026

Executive Summary

Vulnerabilities include unsafe deserialization, RCE, input handling, and state corruption, leading to code execution, DoS, and data tampering. If unpatched, attackers could run code within NVIDIA components, affect system integrity, disrupt services, or access sensitive information.

Key Details

Affected Platform

Attack Surface

Recommended Action

Apply vendor patch

Affected Environment

NVIDIA B300 MCU, Megatron LM, Apex, Triton Inference Server, Model Optimizer, and NeMo Framework across supported platforms are impacted. Exposure depends on use of affected versions in your AI, GPU, or inference deployments and whether patches have been applied.

Operational Impact

Exploitation can trigger denial of service on inference servers, disrupt AI workloads, or place hardware components into bad states. Successful attacks may also enable unauthorized data modification or exposure, impacting reliability of AI outputs and services.

Technical Root Cause

Root causes include code injection opportunities, improper input validation, unsafe deserialization, and memory or state handling flaws. These weaknesses allow crafted files, payloads, or requests to influence execution flow or corrupt internal state in NVIDIA components.

Recommended Mitigation

Upgrade all affected NVIDIA products to the versions specified: B300 1.4, Megatron LM 0.15.3, Triton 26.01, NeMo 2.6.2, Model Optimizer 0.41.0, and Apex commit db8e053.
Apply timely OS, application, and firmware updates, enforce least privilege, and use vulnerability management tools to track remediation.

Concerned about your exposure?

Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.

Discuss Your Security Exposure Explore Managed Detection and Response

Assess your risk

Identify affected systems

Plan remediation

Practical, vendor-aligned guidance

Get expert support

From our 24/7 security team

Stay ahead of emerging threats

Get the latest threat intelligence and security advisories from Smarttech247.

Full Technical Report

Download the complete analysis, including detailed technical findings and references.

Download Full Report (PDF)

References

Refer to NVIDIA security bulletins a_id/5768, 5769, 5782, 5790, 5798, and 5800 for official details and fixed versions. Track the listed CVEs for updates: 2025-33242, 33247, 33248, 33244, 33238, 33254; 2026-24152, 24151, 24150, 24158, 24141, 24157, 24159.