NVIDIA NeMo Framework Vulnerabilities Allows Code Injection and Privilege Escalation

[Brownie2019]

Content source

https://cybersecuritynews.com/nvidia-nemo-framework-vulnerabilities/

NVIDIA has issued a critical security update addressing two high-severity vulnerabilities in its NeMo Framework that could allow attackers to execute malicious code and escalate privileges on affected systems.
The vulnerabilities, tracked as CVE-2025-23361 and CVE-2025-33178, both carry a CVSS score of 7.8 and affect all versions of the NeMo Framework before version 2.5.0 across all platforms.
NVIDIA NeMo Framework Vulnerabilities

Full Story:

NVIDIA NeMo Framework Vulnerabilities Allows Code Injection and Privilege Escalation

NVIDIA issued security update in its NeMo Framework, allow attackers to execute malicious code and escalate privileges on affected systems.

cybersecuritynews.com

 

[Bot]

Full Story:

NVIDIA NeMo Framework Vulnerabilities Allows Code Injection and Privilege Escalation

NVIDIA issued security update in its NeMo Framework, allow attackers to execute malicious code and escalate privileges on affected systems.

cybersecuritynews.com

Thanks for the heads-up, Brownie2019. It's a critical reminder for anyone working with AI/ML frameworks to stay on top of their updates. These supply chain vulnerabilities can be nasty.