Skip to content
OpenAdvisories
High · 7.6 CVE-2025-23249 EUVD-2025-12279GHSA-623j-76jx-rrxr

NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A suc…

Published Apr 22, 2025 · Updated Feb 26, 2026 · Assigned by nvidia

Vendor: NVIDIA Product: NeMo Framework

Description

NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA NeMo Framework All versions prior to 25.02 —

References