Code Injection Vulnerability in NVIDIA NeMo Framework's BERT Services

CVE-2025-33178

What is CVE-2025-33178?

The NVIDIA NeMo Framework for all platforms contains a vulnerability in the BERT services component that allows attackers to craft malicious data. If exploited, this vulnerability can result in unauthorized code execution, privilege escalation, information disclosure, and potential data tampering. It's crucial for organizations using the NeMo Framework to assess their risk and apply necessary mitigations to safeguard their systems.

References