Arbitrary Code Execution Flaw in NVIDIA WebDataset
CVE-2025-23294

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Nvidia Webdataset
Vendor
CVE Published:
13 August 2025

What is CVE-2025-23294?

A vulnerability exists within NVIDIA WebDataset across all platforms that allows malicious actors to execute arbitrary code with elevated permissions. Exploiting this flaw may enable attackers to escalate privileges, potentially leading to unauthorized data tampering, information disclosure, or even denial of service. It is crucial for users of NVIDIA WebDataset to implement necessary security measures to safeguard against these risks.

Affected Version(s)

NVIDIA WebDataset All All versions that do not include code commit 9e95f50

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23294
https://www.cve.org/CVERecord?id=CVE-2025-23294
https://nvidia.custhelp.com/app/answers/detail/a_id/5658

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-23294 : Arbitrary Code Execution Flaw in NVIDIA WebDataset