CVE-2026-65142

Summary

NVIDIA Model-Optimizer suffers from a deserialization vulnerability that allows attackers to execute arbitrary code by tricking the application into processing untrusted data. This flaw can lead to full system compromise and data exposure.

Exploitability

Exploitation requires user interaction through a maliciously crafted input file, making it moderately difficult but achievable with social engineering or file upload capabilities.

Blast radius

If exploited, this vulnerability could affect any system running NVIDIA Model-Optimizer with access to untrusted model files, potentially leading to widespread code execution across affected environments.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected deserialization functionality until a patch is available, or restrict access to the Model-Optimizer service to trusted networks only.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.