NF
Product
NeMo Framework
by NVIDIA · last CVE Jul 27, 2026
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 23Medium 0Low 0
Watch

Add NeMo Framework to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-24159
9.8
1%
Mar 24
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution
Affected: All versions prior to 2.6.2
CVE-2026-24157
9.8
1%
Mar 24
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution
Affected: All versions prior to 2.6.2
CVE-2025-23251
9.8
1%
Apr 22
NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution
Affected: All versions prior to 25.02
CVE-2025-23250
9.8
1%
Apr 22
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write
Affected: All versions prior to 25.02
CVE-2025-23249
9.8
1%
Apr 22
NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution
Affected: All versions prior to 25.02
CVE-2025-23360
9.8
1%
Mar 11
NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write
Affected: All versions prior to 24.12
CVE-2025-33245
8.8
1%
Feb 18
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
Affected: All versions prior to 2.6.1
CVE-2026-24252
7.8
1%
Jul 27
NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection
Affected: Versions 0.0 to 2.7.2
CVE-2026-24228
7.8
0%
Jun 16
NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data
Affected: Versions 0.0 to 2.7.2
CVE-2026-24155
7.8
0%
Jun 16
NVIDIA NeMo Framework for all platforms contains a code injection vulnerability
Affected: Versions 0.0 to 2.7.2
CVE-2025-33252
7.8
0%
Feb 18
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution
Affected: All versions prior to 2.6.1
CVE-2025-33251
7.8
0%
Feb 18
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution
Affected: All versions prior to 2.6.1
CVE-2025-33250
7.8
0%
Feb 18
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution
Affected: All versions prior to 2.6.1
CVE-2025-33249
7.8
0%
Feb 18
NVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script, where malicious input created by an attacker could cause a code injection
Affected: All versions prior to 2.6.1
CVE-2025-33246
7.8
1%
Feb 18
NVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility, where a user could cause a command injection by supplying crafted input to a…
Affected: All versions prior to 2.6.1
CVE-2025-33243
7.8
0%
Feb 18
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution in distributed environments
Affected: All versions prior to 2.6.1
CVE-2025-33241
7.8
0%
Feb 18
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by loading a maliciously crafted file
Affected: All versions prior to 2.6.1
CVE-2025-33236
7.8
0%
Feb 18
NVIDIA NeMo Framework contains a vulnerability where malicious data created by an attacker could cause code injection
Affected: All versions prior to 2.6.1
CVE-2025-33226
7.8
0%
Dec 16
NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection
Affected: All versions prior to 2.5.3
CVE-2025-33212
7.8
0%
Dec 16
NVIDIA NeMo Framework contains a vulnerability in model loading that could allow an attacker to exploit improper control mechanisms if a user loads a maliciously crafted file
Affected: All versions prior to 2.5.3
CVE-2025-33204
7.8
0%
Nov 25
NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection
Affected: All versions prior to 2.5.1
CVE-2025-33178
7.8
0%
Nov 11
NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection
Affected: All versions prior to 2.5.0
CVE-2025-23361
7.8
0%
Nov 11
NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation
Affected: All versions prior to 2.5.0
CVE-2025-23315
7.8
0%
Aug 26
NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an attacker could cause a code injection issue
Affected: All versions prior to 2.4.0
CVE-2025-23314
7.8
0%
Aug 26
NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue
Affected: All versions prior to 2.4.0
CVE-2025-23313
7.8
0%
Aug 26
NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue
Affected: All versions prior to 2.4.0
CVE-2025-23312
7.8
0%
Aug 26
NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attacker could cause a code injection
Affected: All versions prior to 2.4.0
CVE-2025-33253
7.3
0%
Feb 18
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file
Affected: All versions prior to 2.6.1
CVE-2025-33205
7.3
0%
Nov 25
NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a…
Affected: All versions prior to 2.5.1
Showing 29