CVE-2024-0129

Summary

CVE-2024-0129 is a newly disclosed vulnerability affecting NVIDIA NeMo's SaveRestoreConnector component. This issue arises from an unsafe .tar file extraction process, which allows users to potentially perform a path traversal attack. Successful exploitation of this vulnerability could result in code execution and data tampering, posing a significant security risk. NVIDIA is encouraged to release a patch as soon as possible to mitigate this threat. Users are advised to avoid extracting suspicious .tar files until the vulnerability has been addressed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.