CVE-20XX-?
agent?

Nvidia Nemo CVEs.

Published CVEs affecting Nvidia Nemo, ranked by exploit odds.

34 CVEs · updated 2026-11-06 21:11 UTC

  1. CVE-2026-24252

    NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure.

    Injection Nvidia Nemo

    7.8 HIGH 1% exploit odds Fix listed
  2. CVE-2025-23304

    NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering.

    Disclosure Library Nvidia Nemo

    7.8 HIGH 1% exploit odds Fix listed
  3. CVE-2025-33246

    NVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility, where a user could cause a command injection by supplying crafted input to a configuration parameter. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, or information disclosure.

    Injection Nvidia Nemo

    7.8 HIGH 1% exploit odds Fix listed
  4. CVE-2025-23251

    NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering.

    Injection Nvidia Nemo

    7.6 HIGH 0.7% exploit odds Fix listed
  5. CVE-2025-23249

    NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering.

    Code execution Nvidia Nemo

    7.6 HIGH 0.7% exploit odds Fix listed
  6. CVE-2026-24157

    NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.

    Code execution Nvidia Nemo

    7.8 HIGH 0.7% exploit odds Fix listed
  7. CVE-2026-24159

    NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.

    Code execution Nvidia Nemo

    7.8 HIGH 0.7% exploit odds Fix listed
  8. CVE-2025-33245

    NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

    Code execution Nvidia Nemo

    8.0 HIGH 0.6% exploit odds Fix listed
  9. CVE-2025-23250

    NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering.

    Disclosure Nvidia Nemo

    7.6 HIGH 0.6% exploit odds Fix listed
  10. CVE-2025-23303

    NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering.

    Code execution Nvidia Nemo

    7.8 HIGH 0.6% exploit odds Fix listed
  11. CVE-2024-0081

    NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service.

    Nvidia Nemo

    8.6 HIGH 0.6% exploit odds Fix listed
  12. CVE-2025-23360

    NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering.

    Disclosure Nvidia Nemo

    7.1 HIGH 0.5% exploit odds Fix listed
  13. CVE-2022-22821

    NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available.

    Nvidia Nemo

    2.0 LOW 0.3% exploit odds Fix listed
  14. CVE-2025-33178

    NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data tampering.

    Injection Nvidia Nemo

    7.8 HIGH 0.3% exploit odds Fix listed
  15. CVE-2025-23313

    NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

    Injection Nvidia Nemo

    7.8 HIGH 0.3% exploit odds Fix listed
  16. CVE-2025-23361

    NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

    Injection Nvidia Nemo

    7.8 HIGH 0.3% exploit odds Fix listed
  17. CVE-2025-23312

    NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

    Injection Nvidia Nemo

    7.8 HIGH 0.3% exploit odds Fix listed
  18. CVE-2025-23314

    NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

    Injection Nvidia Nemo

    7.8 HIGH 0.3% exploit odds Fix listed
  19. CVE-2025-23315

    NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

    Injection Nvidia Nemo

    7.8 HIGH 0.3% exploit odds Fix listed
  20. CVE-2025-33241

    NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by loading a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

    Code execution Nvidia Nemo

    7.8 HIGH 0.3% exploit odds Fix listed
  21. CVE-2025-33243

    NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution in distributed environments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

    Code execution Nvidia Nemo

    7.8 HIGH 0.3% exploit odds Fix listed
  22. CVE-2025-33250

    NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

    Injection Nvidia Nemo

    7.8 HIGH 0.3% exploit odds Fix listed
  23. CVE-2025-33251

    NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

    Injection Nvidia Nemo

    7.8 HIGH 0.3% exploit odds Fix listed
  24. CVE-2024-0129

    NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to code execution and data tampering.

    Disclosure Nvidia Nemo

    6.3 MEDIUM 0.2% exploit odds Fix listed
  25. CVE-2025-33252

    NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

    Code execution Nvidia Nemo

    7.8 HIGH 0.2% exploit odds Fix listed
  26. CVE-2025-33253

    NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

    Code execution Nvidia Nemo

    7.8 HIGH 0.2% exploit odds Fix listed
  27. CVE-2025-33204

    NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

    Injection Nvidia Nemo

    7.8 HIGH 0.2% exploit odds Fix listed
  28. CVE-2025-33226

    NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

    Code execution Nvidia Nemo

    7.8 HIGH 0.2% exploit odds Fix listed
  29. CVE-2025-33236

    NVIDIA NeMo Framework contains a vulnerability where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

    Injection Nvidia Nemo

    7.8 HIGH 0.2% exploit odds Fix listed
  30. CVE-2025-33249

    NVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script, where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

    Injection Nvidia Nemo

    7.8 HIGH 0.2% exploit odds Fix listed
  31. CVE-2026-24155

    NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

    Injection Nvidia Nemo

    7.8 HIGH 0.2% exploit odds Fix listed
  32. CVE-2025-33212

    NVIDIA NeMo Framework contains a vulnerability in model loading that could allow an attacker to exploit improper control mechanisms if a user loads a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, and data tampering.

    Code execution Nvidia Nemo

    7.3 HIGH 0.2% exploit odds Fix listed
  33. CVE-2025-33205

    NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution.

    Other Nvidia Nemo

    7.3 HIGH 0.2% exploit odds Fix listed
  34. CVE-2026-24228

    NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and information disclosure.

    Code execution Nvidia Nemo

    7.8 HIGH 0.2% exploit odds Fix listed

All CVEs affecting Nvidia Nemo that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.