Skip to content
OpenAdvisories
High · 7.8 CVE-2025-23298 EUVD-2025-24592GHSA-9xw2-c8rr-fh9q

NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability in a python dependency, where an attacker could cause a code inje…

Published Aug 13, 2025 · Updated Aug 13, 2025 · Assigned by nvidia

Description

NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability in a python dependency, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA Merlin Transformers4Rec All versions that do not include code commit b7eaea5 —

References