CVE-2025-23251
CVSS 3.1 Score 7.6 of 10 (high)
Details
Published Apr 22, 2025
Updated: Apr 23, 2025
CWE ID 94
Summary
CVE-2025-23251 is a newly identified vulnerability affecting NVIDIA NeMo Framework. This issue allows a remote user to manipulate code generation processes, potentially resulting in arbitrary code execution and data tampering. Exploitation of this vulnerability could lead to significant security risks and potential damage to affected systems. Users are strongly encouraged to apply the available patches as soon as possible to mitigate these risks. The exact mechanisms of exploitation are still under investigation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.