NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://nvidia.custhelp.com/app/answers/detail/a_id/5729 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.3 · nvidiaNVD modified 2026-10-18 20:10
Affected (CPE criteria) 1
cpe:2.3:a:nvidia:nemo:*:*:*:*:*:*:*:*
References 3
- https://nvd.nist.gov/vuln/detail/CVE-2025-33205 Third Party Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5729 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-33205 Third Party Advisory