The vulnerability of the NVIDIA deep learning experiment management library runx, related to the failure to take measures to neutralize special elements, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the NVIDIA Deep Learning Experiment Management Library relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2025-33234

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

pamai (>=1.0.0, <=1.0.5) potentially affected by CVE-2025-33234 via runx (0.0.11)

runx PYPI version 0.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on runx and may be impacted: - pamai =1.0.0, =1.0.5 Source cves: CVE-2025-33234 Source advisory: SNYK:PYTHON-RUNX-15146881...

Command Injection

Overview runx is a runx - experiment manager for machine learning research Affected versions of this package are vulnerable to Command Injection in undisclosed functionality. According to the vendor, an attacker can execute arbitrary code, escalate privileges, cause denial of service, disclose...

CVE-2025-33234

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33234

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33234

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33234

The CVE-2025-33234 issue affects NVIDIA runx. A vulnerability in runx can enable code injection, with potential consequences including code execution, denial of service, privilege escalation, information disclosure, and data tampering. Root cause details indicate a local attack vector with low pr...

EUVD-2025-206385

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33234

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33234: Improper Neutralization of Special Elements used in an OS Command

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

PT-2026-4986

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

Security Bulletin: NVIDIA runx - January 2026

A security issue was found in NVIDIA runx: https://github.com/NVIDIA/runx during End of Support, but prior to End of Life. As a result, NVIDIA has added an End of Life notice in the README. No patch will be released. Go to NVIDIA Product Security. Details The following table summarizes the...

NVIDIA RunX security vulnerabilities

NVIDIA runx is a deep learning experiment management tool developed by NVIDIA Corporation. NVIDIA runx contains a security vulnerability, which stems from code injection. This vulnerability may lead to code execution, denial of service, privilege escalation, information leakage, and data corrupti...

in nvidia/runx

Description runx is a Deep Learning Experiment Management library by NVIDIA. This package was vulnerable to Arbitrary code execution via Insecure YAML deserialization due to the use of a known vulnerable function load in yaml. repo: https://github.com/NVIDIA/runx Proof of Concept python...