CVE-2026-24237 is a deserialization of untrusted data vulnerability in NVIDIA NVTabular. It enables an attacker with local, low-privilege access to exploit improper deserialization to achieve code execution, data tampering, and information disclosure. The CVSS 3.1 vector indicates low attack complexity and privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available to confirm remediation status or affected versions.

Successful exploitation could lead to arbitrary code execution, unauthorized modification of data, and exposure of sensitive information. The attacker requires local access with low privileges, but no user interaction is needed. The vulnerability impacts confidentiality, integrity, and availability at a high level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to NVTabular usage.