NVIDIA has issued a critical security update that addresses two high-severity vulnerabilities in the NeMo Framework, which could allow attackers to execute malicious code and escalate privileges on affected systems.
See also: Vulnerability in NVIDIA App for Windows allows code execution
The vulnerabilities, listed as CVE-2025-23361 and CVE-2025-33178, have a CVSS score of 7.8 and affect all versions of the NeMo Framework prior to version 2.5.0 on all platforms.
The first vulnerability, CVE-2025-23361, exists in a framework scenario where malicious input from an attacker could cause improper code generation control.
The second vulnerability, CVE-2025-33178, is located in the Bert services component and allows code injection via malicious data.
Both vulnerabilities share the same attack vector and require local access with low privileges.
Successful exploitation could lead to code execution, privilege escalation, information disclosure, and data manipulation, posing significant risks to organizations using the framework.
See also: Donald Trump: China will not have access to top Nvidia AI chips
The vulnerabilities were discovered and reported by security researchers from TencentAISec and the NISL lab at Tsinghua University, highlighting the importance of collaborative security research.
All versions of NVIDIA NeMo Framework prior to version 2.5.0 are vulnerable, regardless of operating system or platform. Organizations using older versions of the software are also at risk and should upgrade immediately.
NVIDIA recommends that users clone or update the NeMo Framework to version 2.5.0 or later, available from the official NVIDIA GitHub repository and PyPI package manager.
The company emphasizes that users on older versions of apps should upgrade to the latest version of apps.
See also: Nvidia: The first company to reach $5 trillion in market capitalization
Organizations should assess their specific configurations and immediately apply the security update to mitigate potential exploitation risks.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
