CVE-2025-23250
CVSS 3.1 Score 7.6 of 10 (high)
Details
Published Apr 22, 2025
Updated: Apr 23, 2025
CWE ID 22
Summary
CVE-2025-23250 is a vulnerability affecting NVIDIA NeMo Framework. An attacker can exploit this issue by performing an arbitrary file write, leading to a pathname limitation to a restricted directory. This improper limitation might result in code execution and data tampering, posing a significant security risk. The vulnerability could be exploited to gain unauthorized access to sensitive information or execute malicious code. Users are strongly advised to update their NVIDIA NeMo Framework to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.