Code Execution and Control Flaw in NVIDIA NeMo Framework
CVE-2025-23361

7.8HIGH

Key Information:

Vendor

Nvidia

Vendor
CVE Published:
11 November 2025

What is CVE-2025-23361?

A vulnerability exists in the NVIDIA NeMo Framework across all platforms, where improper handling of malicious input within a script may lead to unforeseen control over code generation processes. This flaw can potentially be exploited to execute arbitrary code, escalate user privileges, disclose sensitive information, or manipulate data integrity within affected systems. It highlights the necessity for robust input validation and stringent security measures to protect against such vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

NeMo Framework All platforms All versions prior to 2.5.0

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.