Skip to content
OpenAdvisories
High · 7.8 CVE-2025-23361 EUVD-2025-93537GHSA-fwvg-jr4j-p326

NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improp…

Published Nov 11, 2025 · Updated Feb 26, 2026 · Assigned by nvidia

Description

NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA NeMo Framework All versions prior to 2.5.0 —

References