Code Injection Vulnerability in NVIDIA NeMo Framework for NLP and LLM Components

CVE-2025-33204

What is CVE-2025-33204?

The NVIDIA NeMo Framework has a vulnerability affecting its NLP and LLM components, allowing attackers to craft malicious data that may lead to code injection. If exploited, this could result in unauthorized code execution, privilege escalation, information exposure, and data integrity issues. Organizations using this framework should evaluate their configurations and apply necessary mitigations to safeguard their systems.

References