CVE Intelligence

NVIDIA Merlin Transformers4Rec vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting NVIDIA Merlin Transformers4Rec: 3 record(s), with affected versions and fixes.

CVE-2026-24162 High · 7.8 CWE-502 May 26, 2026
Deserialization of Untrusted Data in NVIDIA Transformers4rec
NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2025-33233 High · 7.8 CWE-94 Jan 20, 2026
Code Injection in NVIDIA Merlin Transformers4Rec
NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33213 High · 8.8 CWE-502 Dec 9, 2025
Deserialization of Untrusted Data in NVIDIA Merlin Transformers4Rec
NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.