Cyber Posture

CVE-2025-33251

High

Published: 18 February 2026

Published
18 February 2026
Modified
20 February 2026
KEV Added
Patch
CVSS Score 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0013 31.6th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-33251 is a high-severity Code Injection (CWE-94) vulnerability in Nvidia Nemo. Its CVSS base score is 7.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Command and Scripting Interpreter (T1059); ranked at the 31.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 AC-6 (Least Privilege) and SI-16 (Memory Protection).

Threat & Defense at a Glance

What attackers do: exploitation maps to Command and Scripting Interpreter (T1059) and 1 other technique. What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Directly addresses the CVE by requiring timely identification, reporting, and remediation of flaws like code injection in NVIDIA NeMo Framework through patching.

prevent

Enforces least privilege to limit the capabilities of local low-privilege attackers required for exploiting this vulnerability.

prevent

Implements memory safeguards such as DEP and ASLR to protect against code injection attacks like CWE-94 in the framework.

MITRE ATT&CK Enterprise TechniquesAI

T1059 Command and Scripting Interpreter Execution
Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries.
T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Why these techniques?

CWE-94 code injection in NeMo enables arbitrary code execution (T1059) and local exploitation for privilege escalation or impact (T1068).

Confidence: MEDIUM · MITRE ATT&CK Enterprise v18.1

NVD Description

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

Deeper analysisAI

CVE-2025-33251 is a vulnerability in the NVIDIA NeMo Framework that could allow an attacker to cause remote code execution. A successful exploit might lead to code execution, denial of service, information disclosure, and data tampering. The issue is associated with CWE-94 (Code Injection) and carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high severity with local attack vector, low attack complexity, and requirements for low privileges but no user interaction.

Exploitation requires a local attacker with low-level privileges on the affected system. Upon successful exploitation, the attacker can achieve high impacts across confidentiality, integrity, and availability, including arbitrary code execution, service disruption, sensitive data exposure, and unauthorized data modification.

Mitigation guidance is available in official advisories, including the NVIDIA security bulletin at https://nvidia.custhelp.com/app/answers/detail/a_id/5762, the NVD detail page at https://nvd.nist.gov/vuln/detail/CVE-2025-33251, and the CVE record at https://www.cve.org/CVERecord?id=CVE-2025-33251. The vulnerability was published on 2026-02-18.

Details

CWE(s)

Affected Products

nvidia
nemo
≤ 2.6.1

CVEs Like This One

CVE-2025-33236Same product: Nvidia Nemo
CVE-2025-33249Same product: Nvidia Nemo
CVE-2025-33246Same product: Nvidia Nemo
CVE-2025-33250Same product: Nvidia Nemo
CVE-2026-24157Same product: Nvidia Nemo
CVE-2026-24159Same product: Nvidia Nemo
CVE-2025-33241Same product: Nvidia Nemo
CVE-2025-33245Same product: Nvidia Nemo
CVE-2025-33243Same product: Nvidia Nemo
CVE-2025-33252Same product: Nvidia Nemo

References