SecurityOnlineDdos
CVE-2025-33206: High-Severity Flaw Patched in NVIDIA Nsight Graphics for Linux
NVIDIA has issued a patch for a high-severity vulnerability in Nsight Graphics for Linux, tracked as CVE-2025-33206, with a CVSS score of 7.8. The flaw could allow an attacker to execute arbitrary code or tamper with sensitive data, and is limited to the Linux version of the tool.
The vulnerability stems from how input is handled, enabling command injection that could let an attacker manipulate the host operating system, potentially gaining unauthorized control, escalating privileges, or causing a denial of service. The issue affects all NSIGHT Graphics versions prior to NSIGHT Graphics 2025.5, and NVIDIA has released Nsight Graphics 2025.5 as the fix. Developers and Linux users are urged to upgrade to the latest version to close the security gap. According to the security bulletin, Nsight Graphics for Linux contains a vulnerability where an attacker could cause command injection.