Command injection in NVIDIA Cumulus Linux GA
Priority MEDIUM 40CWE-77Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-77.
Summary
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0041 35th percentileScored 2026-11-07
Fix Fixed Cumulus Linux LTS (NVIDIA): 5.11.4, 5.9.4NVOS (NVIDIA): 25.02.4282, 25.02.5030
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| NVIDIA | Cumulus Linux GA | All versions prior to 5.14 (5.13.x, 5.12.x, and older GA versions) | — | No fix listed | CNA |
| NVIDIA | Cumulus Linux LTS | before 5.11.4 | 5.11.4 | Patch available | CNA |
| NVIDIA | Cumulus Linux LTS | before 5.9.4 | 5.9.4 | Patch available | CNA |
| NVIDIA | NVOS | All versions prior to 1.3 - 25.02.244 | — | No fix listed | CNA |
| NVIDIA | NVOS | before 25.02.4282 | 25.02.4282 | Patch available | CNA |
| NVIDIA | NVOS | before 25.02.5030 | 25.02.5030 | Patch available | CNA |
- Cumulus Linux GA VendorNVIDIA Affected All versions prior to 5.14 (5.13.x, 5.12.x, and older GA versions) Fixed in — No fix listed CNA
- Cumulus Linux LTS VendorNVIDIA Affected before 5.11.4 Fixed in 5.11.4 Patch available CNA
- Cumulus Linux LTS VendorNVIDIA Affected before 5.9.4 Fixed in 5.9.4 Patch available CNA
- NVOS VendorNVIDIA Affected All versions prior to 1.3 - 25.02.244 Fixed in — No fix listed CNA
- NVOS VendorNVIDIA Affected before 25.02.4282 Fixed in 25.02.4282 Patch available CNA
- NVOS VendorNVIDIA Affected before 25.02.5030 Fixed in 25.02.5030 Patch available CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:nvidia:cumulus_linux:*:*:*:*:-:*:*:* | before 5.14.0 | Vulnerable | NVIDIA |
| cpe:2.3:o:nvidia:cumulus_linux:*:*:*:*:lts:*:*:* | 5.9.0 to before 5.9.4; 5.11.0 to before 5.11.4 | Vulnerable | NVIDIA |
| cpe:2.3:o:nvidia:nvos:*:*:*:*:*:*:*:* | before 25.02.2452 | Vulnerable | NVIDIA |
| cpe:2.3:h:nvidia:dgx_gb200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:o:nvidia:nvos:*:*:*:*:*:*:*:* | before 25.02.4282 | Vulnerable | NVIDIA |
| cpe:2.3:h:nvidia:gb300_nvl72:1.0:*:*:*:*:*:*:* | 1.0 | Running on | NVIDIA |
| cpe:2.3:o:nvidia:nvos:*:*:*:*:*:*:*:* | before 25.02.5030 | Vulnerable | NVIDIA |
| cpe:2.3:h:nvidia:quantum-x800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
- cpe:2.3:o:nvidia:cumulus_linux:*:*:*:*:-:*:*:* Versions before 5.14.0 Vulnerable ·NVIDIA
- cpe:2.3:o:nvidia:cumulus_linux:*:*:*:*:lts:*:*:* Versions 5.9.0 to before 5.9.4; 5.11.0 to before 5.11.4 Vulnerable ·NVIDIA
- cpe:2.3:o:nvidia:nvos:*:*:*:*:*:*:*:* Versions before 25.02.2452 Vulnerable ·NVIDIA
- cpe:2.3:h:nvidia:dgx_gb200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:o:nvidia:nvos:*:*:*:*:*:*:*:* Versions before 25.02.4282 Vulnerable ·NVIDIA
- cpe:2.3:h:nvidia:gb300_nvl72:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·NVIDIA
- cpe:2.3:o:nvidia:nvos:*:*:*:*:*:*:*:* Versions before 25.02.5030 Vulnerable ·NVIDIA
- cpe:2.3:h:nvidia:quantum-x800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
Remediation
- Fix · CNA Cumulus Linux LTS (NVIDIA) Fixed in 5.11.4
- Fix · CNA Cumulus Linux LTS (NVIDIA) Fixed in 5.9.4
- Fix · CNA NVOS (NVIDIA) Fixed in 25.02.4282
- Fix · CNA NVOS (NVIDIA) Fixed in 25.02.5030
Timeline
- 2026-10-02 Threatist record created from CVE-2025-33181
- 2026-10-03 Alias added: GHSA-p5fg-p22w-8pfg
References
More NVIDIA Cumulus Linux vulnerabilities
- TI-2025-24117 Command injection in NVIDIA Cumulus Linux GA CVSS 3.1HIGH 8.8
- TI-2023-10830 Improper access control in NVIDIA Cumulus Linux CVSS 3.1HIGH 7.5
- TI-2025-24116 NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface… CVSS 3.1HIGH 8.8
- TI-2026-19495 Buffer overflow in NVIDIA Cumulus Linux GA CVSS 3.1HIGH 8.8
- TI-2026-19494 NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an… CVSS 3.1HIGH 7.8
- TI-2023-10831 NVIDIA Cumulus Linux contains a vulnerability in neighmgrd and nlmanager where an… CVSS 3.1MEDIUM 6.5
Sources
- CVE-2025-33181 · CVE Program
- CVE-2025-33181 · NVD
- FIRST EPSS
- GHSA-p5fg-p22w-8pfg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences