NVIDIA Megatron Bridge has a HIGH-severity YAML parsing RCE (ZDI-26-787), but there's a catch: the CVE says no user interaction needed, while ZDI says otherwise. We break https://deafnews.it/en/article/nvidia-megatron-bridge-user-interaction-rce-in-model-config-yaml-parsing