Code Injection Vulnerability in NVIDIA NeMo Curator
CVE-2025-23307

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Nvidia Nemo Curator
Vendor
CVE Published:
26 August 2025

What is CVE-2025-23307?

NVIDIA NeMo Curator, utilized across various platforms, is susceptible to a code injection vulnerability. This issue arises when a maliciously crafted file is able to be processed by the system, which could allow an attacker to execute arbitrary code. Successful exploitation may lead to unauthorized code execution, elevated privileges, potential information leakage, and unauthorized modifications to data. Organizations leveraging this product should take immediate action to mitigate risks associated with this vulnerability.

Affected Version(s)

NVIDIA NeMo Curator Windows All versions prior to Curator 25.07

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23307
https://www.cve.org/CVERecord?id=CVE-2025-23307
https://nvidia.custhelp.com/app/answers/detail/a_id/5690

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-23307 : Code Injection Vulnerability in NVIDIA NeMo Curator