Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
NVIDIA NeMo Framework'da 2 kritik açık tespit edildi! CVE-2025-23361 ve CVE-2025-33178, CVSS 7.8 skorlu kod enjeksiyonu ve yetki yükseltme sağlıyor. Acil 2.5.0 güncellemesi şart. 🔐 #NVIDIA #NeMo #CVE #CyberSecurity #AI
Post summary
Two critical vulnerabilities in NVIDIA NeMo Framework (CVE‑2025‑23361, CVE‑2025‑33178) enable code injection and privilege escalation; an urgent 2.5.0 update is recommended.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nvidia | nemo | - | - | - |