CVE-2025-23361: Code Injection
NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23361?
CVE-2025-23361 is considered a high-severity vulnerability due to its potential to allow code execution and privilege escalation.
How do I fix CVE-2025-23361?
To fix CVE-2025-23361, users should update to the latest version of the NVIDIA NeMo Framework that addresses the vulnerability.
What platforms are affected by CVE-2025-23361?
CVE-2025-23361 affects all platforms running the NVIDIA NeMo Framework.
What are the potential impacts of exploiting CVE-2025-23361?
Exploiting CVE-2025-23361 may lead to code execution, escalation of privileges, and information disclosure.
How can I determine if I am vulnerable to CVE-2025-23361?
To determine vulnerability to CVE-2025-23361, check if your version of the NVIDIA NeMo Framework is listed as affected or outdated.