Skip to content

NVIDIA · product

NeMo Framework

29 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 29 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tamper…CVE-2026-24252NVIDIA · CVSS 7.8 · 1.5% likelycovered by CyberSIXT

    CWE-78

  2. NVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility, where a user could cause a command injection by supplying crafted input to a configu…CVE-2025-33246NVIDIA · CVSS 7.8 · 1.1% likely

    CWE-77

  3. NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution. A successful exploit of this vulnerabil…CVE-2025-23251NVIDIA · CVSS 7.6 · 0.7% likely

    CWE-94

  4. NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability mi…CVE-2025-23249NVIDIA · CVSS 7.6 · 0.7% likely

    CWE-502

  5. NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to…CVE-2026-24157NVIDIA · CVSS 7.8 · 0.7% likely

    CWE-502

  6. NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalati…CVE-2026-24159NVIDIA · CVSS 7.8 · 0.7% likely

    CWE-502

  7. NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, esc…CVE-2025-33245NVIDIA · CVSS 8 · 0.6% likely

    CWE-502

  8. NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successfu…CVE-2025-23250NVIDIA · CVSS 7.6 · 0.6% likely

    CWE-22

  9. NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lea…CVE-2025-23360NVIDIA · CVSS 7.1 · 0.5% likely

    CWE-23

  10. NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successfu…CVE-2025-33178NVIDIA · CVSS 7.8 · 0.3% likely

    CWE-94

  11. NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful…CVE-2025-23313NVIDIA · CVSS 7.8 · 0.3% likely

    CWE-94

  12. NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A success…CVE-2025-23361NVIDIA · CVSS 7.8 · 0.3% likely

    CWE-94

  13. NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an attacker could cause a code injection issue…CVE-2025-23315NVIDIA · CVSS 7.8 · 0.3% likely

    CWE-94

  14. NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful…CVE-2025-23314NVIDIA · CVSS 7.8 · 0.3% likely

    CWE-94

  15. NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attacker could cause a code injection. A s…CVE-2025-23312NVIDIA · CVSS 7.8 · 0.3% likely

    CWE-94

  16. NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution in distributed environments. A successful exploit of this vulnerability might le…CVE-2025-33243NVIDIA · CVSS 7.8 · 0.3% likely

    CWE-502

  17. NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by loading a maliciously crafted file. A successful exploit of this vulnerabilit…CVE-2025-33241NVIDIA · CVSS 7.8 · 0.3% likely

    CWE-502

  18. NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial…CVE-2025-33251NVIDIA · CVSS 7.8 · 0.3% likely

    CWE-94

  19. NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial…CVE-2025-33250NVIDIA · CVSS 7.8 · 0.3% likely

    CWE-94

  20. NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial…CVE-2025-33252NVIDIA · CVSS 7.8 · 0.2% likely

    CWE-502

  21. NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of…CVE-2025-33253NVIDIA · CVSS 7.8 · 0.2% likely

    CWE-502

  22. NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability…CVE-2025-33226NVIDIA · CVSS 7.8 · 0.2% likely

    CWE-502

  23. NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successfu…CVE-2025-33204NVIDIA · CVSS 7.8 · 0.2% likely

    CWE-94

  24. NVIDIA NeMo Framework contains a vulnerability where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability might lead to cod…CVE-2025-33236NVIDIA · CVSS 7.8 · 0.2% likely

    CWE-94

  25. NVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script, where malicious input created by an attacker could cause a code injection. A succ…CVE-2025-33249NVIDIA · CVSS 7.8 · 0.2% likely

    CWE-77

  26. NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,…CVE-2026-24155NVIDIA · CVSS 7.8 · 0.2% likelycovered by CyberSIXT

    CWE-94

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.