CVE-2026-24246 is a vulnerability in NVIDIA Megatron Bridge for Linux categorized under CWE-470 (Use of Externally-Controlled Input to Select Classes or Code, also known as 'Unsafe Reflection'). This vulnerability allows an attacker with local access and user interaction to manipulate dynamically managed code resources improperly. Exploitation can lead to high-impact consequences including code execution, privilege escalation, data tampering, and information disclosure. The CVSS 3.1 vector indicates low attack complexity, no privileges required, but user interaction is necessary. There is no vendor advisory or patch information available at this time.

Successful exploitation could result in arbitrary code execution, escalation of privileges, unauthorized modification of data, and exposure of sensitive information on affected systems running NVIDIA Megatron Bridge for Linux. The vulnerability is rated high severity with a CVSS score of 7.8, reflecting significant confidentiality, integrity, and availability impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local user access to trusted individuals and avoid executing untrusted input that could trigger unsafe reflection in the affected software.