CVE-2025-23261
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
NVIDIA Cumulus Linux and NVOS products contain a vulnerability where hashed user passwords are not properly suppressed in log files, potentially disclosing information to unauthorized users.
Risk Assessment
An unauthorized user with access to log files could obtain password hashes and conduct password cracking attacks.
Recommendation
Update NVIDIA Cumulus Linux and NVOS to a patched version. Restrict access to log files.
Other vulnerabilities in NVIDIA Cumulus Linux
See all- CVE-2026-24184High
NVIDIA Cumulus Linux contains a vulnerability in the LLDP daemon, where an unauthenticated attacker on an adjacent network could cause a buffer overflow by sending crafted LLDP frames. Successful exploitation may lead to code execution.
- CVE-2026-24183High
NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could exploit improper privilege management. Successful exploitation may lead to privilege escalation.
Original NVD description (English source)
NVIDIA Cumulus Linux and NVOS products contain a vulnerability, where hashed user passwords are not properly suppressed in log files, potentially disclosing information to unauthorized users.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS