Skip to content
OpenAdvisories
High · 7.3 CVE-2025-33205 EUVD-2025-199613GHSA-q6fv-2j55-qxq9

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an u…

Published Nov 25, 2025 · Updated Feb 26, 2026 · Assigned by nvidia

Description

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution.

Affected products

VendorProductAffectedFixed
NVIDIA NeMo Framework All versions prior to 2.5.1 —

References