Executive brief
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
Affected products
- PyPI nemo-toolkit
Junglewise Threat Intelligence
CVE-2025-33245: PYSEC-2026-2672 - NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
CVE-2025-33245 · Severity: low · CVSS 3.1 · Published 2026-07-13
Technologies: nemo-toolkit (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2674 - NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
- PYSEC-2026-2675 - NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
- PYSEC-2026-2673 - NVIDIA NeMo Framework Deserializes Untrusted Data
- PYSEC-2026-685 - Path Traversal in nemo-toolkit