CVE-2025-23361
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Risk Assessment
The vulnerability could allow an attacker to execute code, escalate privileges, access sensitive information, and modify data. This affects the security of the entire NVIDIA NeMo environment.
Recommendation
Update NVIDIA NeMo Framework to the latest patched version. Restrict access to scripts and input data to trusted sources.
Other vulnerabilities in NVIDIA NeMo Framework
See all- CVE-2026-24155High
The NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
- CVE-2025-33204High
NVIDIA NeMo Framework contains a vulnerability in the NLP and LLM components where malicious data crafted by an attacker could cause code injection. A successful exploit may lead to code execution, privilege escalation, information disclosure, and data tampering.
- CVE-2025-33178High
NVIDIA NeMo Framework contains a vulnerability in the bert services component where malicious data created by an attacker may cause code injection. A successful exploit may lead to code execution, privilege escalation, information disclosure, and data tampering.
Original NVD description (English source)
NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS