Deserialization Vulnerability in NVIDIA Merlin Transformers4Rec for Linux

CVE-2025-33213

What is CVE-2025-33213?

The NVIDIA Merlin Transformers4Rec for Linux is affected by a vulnerability in its Trainer component that allows for a deserialization issue. An attacker could exploit this vulnerability to execute arbitrary code, cause denial of service, disclose sensitive information, or manipulate data within the system. This highlights the importance of maintaining updated software and implementing robust security measures to mitigate potential risks. Organizations using this product should assess their systems for exposure and apply recommended patches or mitigations provided by NVIDIA.

References