NVIDIA Nemo vulnerabilities

34 CVEs affecting NVIDIA Nemo, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-24252, published 2026-07-27.

More from NVIDIA.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-24252, published 2026-07-27. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of…
• CVE-2025-33246, published 2026-02-18. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. NVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility, where a user could cause a command injection by supplying crafted input to a configuration parameter. A…
• CVE-2025-23304, published 2025-08-13. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A…
• CVE-2025-23251, published 2025-04-22. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution. A successful exploit of this vulnerability might lead to…
• CVE-2025-23249, published 2025-04-22. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code…
• CVE-2026-24157, published 2026-03-24. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution,…
• CVE-2026-24159, published 2026-03-24. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,…
• CVE-2025-33245, published 2026-02-18. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of…
• CVE-2025-23250, published 2025-04-22. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this…
• CVE-2024-0081, published 2024-04-05. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this…

Latest

• CVE-2026-24228, published 2026-06-16. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability may lead to code execution,…
• CVE-2026-24155, published 2026-06-16. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information…
• CVE-2025-33253, published 2026-02-18. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability…
• CVE-2025-33252, published 2026-02-18. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial of service,…
• CVE-2025-33251, published 2026-02-18. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial of service,…
• CVE-2025-33250, published 2026-02-18. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial of service,…
• CVE-2025-33249, published 2026-02-18. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script, where malicious input created by an attacker could cause a code injection. A successful exploit of…