Code Injection Vulnerability in NVIDIA NeMo Framework NLP Component

CVE-2025-23313

What is CVE-2025-23313?

The NVIDIA NeMo Framework for all platforms is impacted by a vulnerability in its Natural Language Processing (NLP) component. This flaw allows attackers to inject malicious data, posing a risk of code execution. Successful exploitation could result in undesirable consequences such as privilege escalation, unauthorized information disclosure, and potential data tampering. It is critical for users to be aware of this vulnerability and implement appropriate security measures to mitigate risks.

References