CVE-2025-23360 — NVIDIA / NeMo Framework

CVE-2025-23360

NVIDIA / NeMo Framework PUBLISHED

Description (CNA)

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering.

Affected (CNA)

Vendor / product	Versions
NVIDIA / NeMo Framework	affected All versions prior to 24.12

CWE

CWE-23

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5623

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.