NVIDIA Delegated Licensing Service Exploit in Appliance Platforms
CVE-2025-23293

8.7HIGH

Key Information:

Vendor

Nvidia

Vendor
CVE Published:
30 September 2025

What is CVE-2025-23293?

The NVIDIA Delegated Licensing Service across all appliance platforms contains a vulnerability that allows an attacker to perform authorized actions unexpectedly. This misconfiguration could potentially lead to information disclosure, posing a significant risk to the integrity and confidentiality of the data managed by the service. Users and organizations using affected systems should take immediate action to mitigate the risks associated with this vulnerability.

Affected Version(s)

DLS component of NVIDIA License System All All versions prior to v3.5.1 and v3.1.7

References

CVSS V3.1

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-23293 : NVIDIA Delegated Licensing Service Exploit in Appliance Platforms