Vulnerability Database

308,926

Total vulnerabilities in the database

CVE-2025-23250

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering.

  • Published: Apr 22, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-23250
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.6
  • AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

CWEs:

OWASP TOP 10:

Software From Fixed in
nvidia / nemo - 25.02