CVE-2025-23250 — NVIDIA / NeMo Framework

CVE-2025-23250

NVIDIA / NeMo Framework PUBLISHED

Description (CNA)

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering.

Affected (CNA)

Vendor / product	Versions
NVIDIA / NeMo Framework	affected All versions prior to 25.02

CWE

CWE-22

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5641

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.