NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://nvidia.custhelp.com/app/answers/detail/a_id/5718 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.8 · nvidiaNVD modified 2026-10-18 21:10
Affected (CPE criteria) 1
cpe:2.3:a:nvidia:nemo:*:*:*:*:*:*:*:*
References 3
- https://nvd.nist.gov/vuln/detail/CVE-2025-23361 Technical Description
- https://nvidia.custhelp.com/app/answers/detail/a_id/5718 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-23361 Technical Description