NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://nvidia.custhelp.com/app/answers/detail/a_id/5729 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.8 · nvidiaNVD modified 2026-10-18 20:10
Affected (CPE criteria) 1
cpe:2.3:a:nvidia:nemo:*:*:*:*:*:*:*:*
References 3
- https://nvd.nist.gov/vuln/detail/CVE-2025-33204 Third Party Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5729 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-33204 Third Party Advisory