CVE-2025-23360: Path Traversal
Published Mar 11, 2025
·Updated
NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering.
Affected Software
5 affected components
Nvidia NeMo framework
All of the following
Nvidia NeMo<24.12
Any of the following
Apple macOS
Linux Linux kernel
Microsoft Windows
Event History
Mar 11, 2025
CVE Published
via MITRE·07:44 PM
Data Sourced
via MITRE·07:44 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-23360?
The severity of CVE-2025-23360 is considered high due to its potential for code execution and data tampering.
2
How do I fix CVE-2025-23360?
To fix CVE-2025-23360, update the NVIDIA Nemo Framework to the latest patched version provided by NVIDIA.
3
What type of vulnerability is CVE-2025-23360?
CVE-2025-23360 is a relative path traversal vulnerability that allows arbitrary file writing.
4
What are the potential consequences of exploiting CVE-2025-23360?
Exploiting CVE-2025-23360 could lead to unauthorized code execution and data tampering within affected systems.
5
Which software is affected by CVE-2025-23360?
The NVIDIA Nemo Framework is the affected software for CVE-2025-23360.