Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

34 records

Priority LOW 39

NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01489 Published 2026-07-27 No fix listed CWE-78
Priority LOW 35

NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00161 Published 2026-06-16 No fix listed CWE-502
TI-2026-19470 CVE-2026-24155 · GHSA-xp23-6mrm-wqh3

Code injection in NVIDIA NeMo Framework

Priority LOW 35

NVIDIA NeMo Framework for all platforms contains a code injection vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00193 Published 2026-06-16 No fix listed CWE-94
Priority MEDIUM 44

NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00665 Published 2026-03-24 Fixed in 2.6.2 CWE-502
Priority LOW 35

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00227 Published 2026-02-18 Fixed in 2.6.1 CWE-502
TI-2025-24185 CVE-2025-33251 · GHSA-qq2v-q6qr-p5vx

Code injection in NVIDIA NeMo Framework

Priority LOW 36

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00254 Published 2026-02-18 Fixed in 2.6.1 CWE-94
TI-2025-24184 CVE-2025-33250 · GHSA-wvvh-pcq5-hc6f

Code injection in NVIDIA NeMo Framework

Priority LOW 36

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00254 Published 2026-02-18 Fixed in 2.6.1 CWE-94
TI-2025-24183 CVE-2025-33249 · GHSA-j9p7-7ww6-3mjx

Command injection in NVIDIA NeMo Framework

Priority LOW 35

NVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script, where malicious input created by an attacker could cause a code injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00199 Published 2026-02-18 Fixed in 2.6.1 CWE-77
TI-2025-24180 CVE-2025-33246 · GHSA-25w3-5rm9-v4wm

Command injection in NVIDIA NeMo Framework

Priority LOW 38

NVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility, where a user could cause a command injection by supplying crafted input to a configuration parameter.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01067 Published 2026-02-18 Fixed in 2.6.1 CWE-77
Priority MEDIUM 41

NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00639 Published 2026-02-18 Fixed in 2.6.1 CWE-502
Priority LOW 36

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution in distributed environments.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00255 Published 2026-02-18 Fixed in 2.6.1 CWE-502
Priority LOW 36

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by loading a maliciously crafted file.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00255 Published 2026-02-18 Fixed in 2.6.1 CWE-502
TI-2025-24170 CVE-2025-33236 · GHSA-f86v-54pm-58q4

Code injection in NVIDIA NeMo Framework

Priority LOW 35

NVIDIA NeMo Framework contains a vulnerability where malicious data created by an attacker could cause code injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00203 Published 2026-02-18 Fixed in 2.6.1 CWE-94
Priority LOW 35

NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00217 Published 2025-12-16 Fixed in 2.5.3 CWE-502
Priority LOW 35

NVIDIA NeMo Framework contains a vulnerability in model loading that could allow an attacker to exploit improper control mechanisms if a user loads a maliciously crafted file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00188 Published 2025-12-16 Fixed in 2.5.3 CWE-502
TI-2025-24141 CVE-2025-33204 · GHSA-vcv5-9rj4-6vpf

Code injection in NVIDIA NeMo Framework

Priority LOW 35

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00217 Published 2025-11-25 Fixed in 2.5.1 CWE-94
TI-2025-24115 CVE-2025-33178 · GHSA-w8mh-76jq-xrg5

Code injection in NVIDIA NeMo Framework

Priority LOW 36

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00281 Published 2025-11-11 Fixed in 2.5.0 CWE-94
TI-2025-17136 CVE-2025-23361 · GHSA-fwvg-jr4j-p326

Code injection in NVIDIA NeMo Framework

Priority LOW 36

NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00258 Published 2025-11-11 Fixed in 2.5.0 CWE-94
TI-2025-17091 CVE-2025-23315 · GHSA-vqg6-gvc9-fh2h

Code injection in NVIDIA NeMo Framework

Priority LOW 36

NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an attacker could cause a code injection issue.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00256 Published 2025-08-26 Fixed in 2.4.0 CWE-94
TI-2025-17090 CVE-2025-23314 · GHSA-jjgw-82ph-6fgv

Code injection in NVIDIA NeMo Framework

Priority LOW 36

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00256 Published 2025-08-26 Fixed in 2.4.0 CWE-94
TI-2025-17089 CVE-2025-23313 · GHSA-gjmf-2qm5-q5m2

Code injection in NVIDIA NeMo Framework

Priority LOW 36

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00261 Published 2025-08-26 Fixed in 2.4.0 CWE-94
TI-2025-17088 CVE-2025-23312 · GHSA-94wm-455p-gr2f

Code injection in NVIDIA NeMo Framework

Priority LOW 36

NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attacker could cause a code injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00256 Published 2025-08-26 Fixed in 2.4.0 CWE-94
Load more