CVE-2025-33226: Code Injection
NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-33226?
CVE-2025-33226 is considered a critical vulnerability due to its potential for code execution and escalation of privileges.
How do I fix CVE-2025-33226?
To fix CVE-2025-33226, update the NVIDIA NeMo Framework to the latest version that contains the security patches addressing this vulnerability.
What types of attacks can CVE-2025-33226 enable?
CVE-2025-33226 may enable code injection attacks that can lead to code execution, privilege escalation, information disclosure, and data tampering.
Who is affected by CVE-2025-33226?
CVE-2025-33226 affects all users of the NVIDIA NeMo Framework across all platforms.
What should I do if I am using NVIDIA NeMo Framework?
If you are using NVIDIA NeMo Framework, you should assess your exposure to CVE-2025-33226 and apply the recommended updates immediately.