High severity7.6NVD Advisory· Published Apr 22, 2025· Updated Jun 17, 2026

CVE-2025-23249

Description

NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering.

Affected products

Nvidia/Nemo
cpe:2.3:a:nvidia:nemo:*:*:*:*:*:*:*:*
Range: <25.02
Nvidia/NeMo Frameworkllm-fuzzy
Nvidia/Bionemo Frameworkcpe-rescue
Range: All versions prior to 25.02

Patches

Vulnerability mechanics

References

nvidia.custhelp.com/app/answers/detail/a_id/5641nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.494
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000