CVE-2026-61771: CWE-502 Deserialization of Untrusted Data in NVIDIA Megatron Bridge

CVE-2026-61771 is a deserialization of untrusted data vulnerability (CWE-502) in NVIDIA Megatron Bridge. An attacker with local access and low privileges can exploit this vulnerability without user interaction to achieve high impact on confidentiality, integrity, and availability, including potential code execution, data tampering, and information disclosure. The CVSS 3.1 base score is 7.8, reflecting the high severity of this issue. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation could lead to remote code execution, unauthorized modification of data, and leakage of sensitive information within the affected system. The vulnerability affects confidentiality, integrity, and availability at a high level. However, exploitation requires local access and low privileges, limiting the attack surface to some extent.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to the Megatron Bridge component.