CVE-2025-23314

CVE-2025-23314 affects NVIDIA NeMo Framework (NLP component). Exploitation could allow code injection with potential code execution, privilege escalation, data tampering, and information disclosure. Affected is the NeMo Framework across platforms; root cause not detailed in provided documents. Ex...

CVE-2025-23314

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...

CVE-2025-23314

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...

CVE-2025-23313

Summary (CVE-2025-23313) : NVIDIA NeMo Framework (NLP component) across platforms is described as vulnerable to code injection via malicious data. The underlying root cause is not detailed in the provided documents, but the consequence could include code execution, privilege escalation, informati...

CVE-2025-23313

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...

CVE-2025-23313

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...

CVE-2025-23312

NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure...

CVE-2025-23312

NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure...

CVE-2025-23312

The CVE concerns NVIDIA NeMo Framework across all platforms, specifically a vulnerability in the retrieval services component where attacker-crafted data can trigger a code injection. The impact described in connected sources includes code execution, escalation of privileges, information disclosu...

CVE-2025-23307

NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-23307

CVE-2025-23307 affects NVIDIA NeMo Curator (all platforms). The vulnerability arises from processing maliciously crafted files, enabling arbitrary code execution via code injection, with potential for escalation of privileges, information disclosure, and data tampering. Public advisories in multi...

CVE-2025-23307

NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

PT-2025-34803 · Nvidia · Nvidia Nemo Framework

Name of the Vulnerable Software and Affected Versions: NVIDIA NeMo Framework affected versions not specified Description: The NVIDIA NeMo Framework contains an issue in the retrieval services component that could allow an attacker to inject code via malicious data. A successful exploit may lead t...

NVIDIA Nemo Framework 代码注入漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A code injection vulnerability exists in the NVIDIA NeMo Framework, which stems from malicious data in the export and deploy component that could lead to code injection, which in turn could lead to...

NVIDIA Nemo Framework 代码注入漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. The NVIDIA Nemo Framework suffers from a code injection vulnerability that stems from malicious data in the NLP component that could lead to code injection, which in turn could lead to code execution...

NVIDIA NeMo Framework 注入漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A code injection vulnerability exists in NVIDIA NeMo Framework, which stems from malicious data in the retrieval services component that could lead to code injection, which in turn could lead to code...

NVIDIA Nemo Framework 代码注入漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. The NVIDIA Nemo Framework suffers from a code injection vulnerability that stems from malicious data in the NLP component that could lead to code injection, which in turn could lead to code execution...

Security Bulletin: NVIDIA NeMo Framework - August 2025

NVIDIA has released a software update for NVIDIA® NeMo Framework. To protect your system, download and install the latest NVIDIA NeMo Framework from NVIDIA Github and pypi. Go to NVIDIA Product Security...

Security Bulletin: NVIDIA NeMo Curator - August 2025

NVIDIA has released a software update for NVIDIA® NeMo Curator To protect your system, download and install the latest NVIDIA Nemo Curator from NVIDIA Github. Go to NVIDIA Product Security...

PT-2025-34804 · Nvidia · Nvidia Nemo Framework

Name of the Vulnerable Software and Affected Versions: NVIDIA NeMo Framework affected versions not specified Description: The NVIDIA NeMo Framework contains an issue in the NLP component that could allow an attacker to inject code through maliciously crafted data. A successful exploit may lead to...