CVE-2025-33208: High severity Nvidia TAO vulnerability

Published Dec 3, 2025

Updated

NVIDIA TAO contains a vulnerability where an attacker may cause a resource to be loaded via an uncontrolled search path. A successful exploit of this vulnerability may lead to escalation of privileges, data tampering, denial of service, information disclosure.

Affected Software

3 affected components

Nvidia TAO

All of the following

Nvidia Tao Toolkit=6.25.7

Canonical Ubuntu Linux

Remediation

Patch Available

https://nvidia.custhelp.com/app/answers/detail/a_id/5730

Event History

Dec 3, 2025

CVE Published

via MITRE·06:19 PM

Data Sourced

via MITRE·06:19 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-33208?

The severity of CVE-2025-33208 is critical due to its potential for privilege escalation and information disclosure.

How do I fix CVE-2025-33208?

To fix CVE-2025-33208, update to the latest version of NVIDIA TAO where the vulnerability is patched.

What are the potential impacts of exploiting CVE-2025-33208?

Exploiting CVE-2025-33208 can lead to privilege escalation, data tampering, denial of service, and information disclosure.

Who is affected by CVE-2025-33208?

CVE-2025-33208 affects all users of NVIDIA TAO software.

What type of vulnerability is CVE-2025-33208?

CVE-2025-33208 is an uncontrolled search path vulnerability that can be exploited by attackers.