Skip to content
OpenAdvisories
High · 7.8 CVE-2025-23304 EUVD-2025-24608GHSA-2ggj-xvxm-ww8m

NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection…

Published Aug 13, 2025 · Updated Feb 26, 2026 · Assigned by nvidia

Description

NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA NeMo Framework All versions prior to 2.3.2 —

References