Skip to content
OpenAdvisories
High · 7.6 CVE-2025-23250 EUVD-2025-12277GHSA-gxj5-h4j6-fmfx

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory…

Published Apr 22, 2025 · Updated Feb 26, 2026 · Assigned by nvidia

Description

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA NeMo Framework All versions prior to 25.02 —

References