CVE-2025-33253
HIGH7.8EPSS 0.10%NVIDIA NeMo Framework Deserializes Untrusted Data
發布日:2026/2/18修改日:2026/2/20
描述
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
受影響套件(1)
- PyPI/nemo-toolkitfrom 0, < 2.6.1
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |