NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data tampering.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://nvidia.custhelp.com/app/answers/detail/a_id/5718 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.8 · nvidiaNVD modified 2026-10-18 21:10
Affected (CPE criteria) 1
cpe:2.3:a:nvidia:nemo:*:*:*:*:*:*:*:*
References 3
- https://nvd.nist.gov/vuln/detail/CVE-2025-33178 Technical Description
- https://nvidia.custhelp.com/app/answers/detail/a_id/5718 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-33178 Technical Description