CVE-2025-33230: NVIDIA Cuda Toolkit

High severity, CVSS 7.3. EPSS: 1.4% chance of exploitation in the next 30 days.

NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.

Affected products

• NVIDIA Cuda Toolkit: before 13.1.0 (fixed in 13.1.0)

Published 2026-01-20. Last modified 2026-06-17.