CVE-2025-33250: 
NixOS vulnerability analysis and mitigation

CVE-2025-33250 is a code injection vulnerability (CWE-94) in the NVIDIA NeMo Framework that could allow an attacker to cause remote code execution. It affects all NeMo versions prior to 2.6.1. The vulnerability was published on February 18, 2026, with an initial NVD analysis completed on February 20, 2026. NVIDIA assigned a CVSS v3.1 base score of 7.8 (High) (NVIDIA Advisory, Red Hat CVE).

The vulnerability is classified as CWE-94 (Improper Control of Generation of Code / Code Injection), meaning the NeMo Framework fails to properly sanitize or restrict user-controlled input that is subsequently used in code generation or evaluation. The attack vector is local, requiring low privileges and no user interaction, suggesting the flaw may be triggered through crafted inputs processed by the framework's model training, inference, or data pipeline components. No detailed public technical write-up or proof-of-concept code has been identified at this time (NVIDIA Advisory, Red Hat CVE).

Successful exploitation of CVE-2025-33250 can result in arbitrary code execution, denial of service, information disclosure, and data tampering on systems running vulnerable versions of NVIDIA NeMo. Given the high confidentiality, integrity, and availability impact ratings, a successful attack could lead to full compromise of the affected system, including unauthorized access to sensitive model data, training datasets, or credentials stored on the host. The local attack vector limits remote exploitation but still poses significant risk in multi-tenant or shared AI infrastructure environments (NVIDIA Advisory).

There is no public proof-of-concept exploit and no evidence of in-the-wild exploitation at this time. The EPSS score is approximately 0.176%, indicating a low probability of exploitation in the near term. The vulnerability is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. No threat actor attribution has been reported (Red Hat CVE).

NVIDIA has released a patch in NeMo version 2.6.1, which resolves this vulnerability. Organizations should upgrade to NeMo 2.6.1 or later as the primary remediation step. Until patching is complete, restrict local access to systems running vulnerable NeMo versions, apply the principle of least privilege to limit user permissions, and monitor for unusual process activity or unauthorized code execution attempts (NVIDIA Advisory).

The vulnerability received brief coverage on social media, including a mention on Mastodon via The Hacker Wire shortly after disclosure. No significant vendor statements beyond the official NVIDIA security bulletin, and no notable independent researcher commentary or major media coverage has been identified (NVIDIA Advisory).