CVE-2025-33253

Published: Feb 18, 2026Modified: Jun 17, 2026

7.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.3 / Impact: 5.9

Source: NVD

Description

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

Affected (1)

Products: Nvidia: Nemo

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nvidia Nemo	Before 2.6.1

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-33253

Source: psirt@nvidia.com

US Government ResourceVDB Entry

https://nvidia.custhelp.com/app/answers/detail/a_id/5762

Source: psirt@nvidia.com

Vendor Advisory

https://www.cve.org/CVERecord?id=CVE-2025-33253

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.