Skip to content
OpenAdvisories
High · 7.8 CVE-2025-33178 EUVD-2025-93536GHSA-w8mh-76jq-xrg5

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker…

Published Nov 11, 2025 · Updated Feb 26, 2026 · Assigned by nvidia

Description

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA NeMo Framework All versions prior to 2.5.0 —

References