NVIDIA Merlin TRANSFORMERS4REC vulnerabilities

2 CVEs affecting NVIDIA Merlin TRANSFORMERS4REC, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-33233, published 2026-01-20.

More from NVIDIA.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-33213, published 2025-12-09. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue. A successful exploit of this vulnerability might lead to…
• CVE-2025-33233, published 2026-01-20. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution,…