ZDI 2026-08-13

ZDI-26-564: NVIDIA Transformers4Rec load_model_trainer_states_from_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

CVE-2026-24232

Machine-generated analysis · WAYSCloud LLM

Remote code execution is possible via deserialization of untrusted data in Transformers4Rec's load_model_trainer_states_from_checkpoint function.

Context

The advisory concerns NVIDIA Transformers4Rec. It describes a deserialization of untrusted data in the load_model_trainer_states_from_checkpoint function that can lead to remote code execution. Exploitation requires the victim to visit a malicious page or open a malicious file.

Operator considerations

- Check: inventory installations of NVIDIA Transformers4Rec and verify their versions.

From Zero Day Initiative ↗

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Transformers4Rec. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24232.

Read the full advisory on ZDI →