NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-33245 · ADVISORY
• NVIDIA-NeMo/NeMo · PACKAGE
• nvidia.custhelp.com/app/answers/detail/a_id/5762 · WEB
• cve.org/CVERecord · WEB
• pypi.org/project/nemo-toolkit · PACKAGE
• GitHub Advisory GHSA-9379-mwvr-7wxx · ADVISORY

nemo-toolkit のその他の脆弱性

• CVE-2026-24159緊急 9.8NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability…
• CVE-2026-24157緊急 9.8NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful explo…
• CVE-2025-33253高 7.3NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciousl…
• CVE-2022-22821中 4.4NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admi…