Skip to content
OpenAdvisories
High · 7.8 CVE-2025-33233 EUVD-2026-3359GHSA-gppc-p6mf-9cjv

NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. A successful exploi…

Published Jan 20, 2026 · Updated Jan 20, 2026 · Assigned by nvidia

Description

NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA Merlin Transformers4Rec All code branches that do not include commit 27ddd49 —

References