Multiple Vulnerabilities in NVIDIA Products · CIAD-2025-0046
CERT-In advisory CIAD-2025-0046 · 26 Nov 2025
Official title
CIAD-2025-0046 : Multiple Vulnerabilities in NVIDIA Products
Official record
Open source pageSummary
Check the official recordWhat changed
CERT-In reports multiple vulnerabilities in NVIDIA products that allow remote code execution, privilege escalation, information disclosure, and denial of service. Affected software includes NVIDIA AIStore AuthN component versions before 3.31, NVIDIA Triton Inference Server versions before 25.09, NVIDIA NeMo Framework versions before 2.5.0, and NVIDIA Megatron LM versions before 0.14.0. Users must apply the security updates provided in the official NVIDIA security advisories to mitigate these risks. Failure to update systems may result in full system compromise or service unavailability.
What you must do
- Apply the security fixes specified in the NVIDIA security advisories.
Key dates
- Original Issue Date
- 26 Nov 2025
Who is affected
Document text
CERT-In Advisory CIAD-2025-0046
Multiple Vulnerabilities in NVIDIA Products
Original Issue Date: November 26, 2025
Severity Rating: High
Software Affected
NVIDIA AIStore's AuthN component versions prior to 3.31 for all platforms or OS NVIDIA Triton Inference Server versions prior to 25.09 for Linux and Windows NVIDIA NeMo Framework versions prior to 2.5.0 for all platforms or OS NVIDIA Megatron LM versions prior to 0.14.0 for all platforms or OS
Overview
Multiple vulnerabilities have been reported in NVIDIA products which could allow an attacker to execute arbitrary code, gain elevated privileges, disclose sensitive information and cause denial of service (DoS) condition on the targeted system.
Target Audience: All organizations and individuals using NVIDIA Products.
Impact Assessment: Potential for remote code execution, privilege escalation, information disclosure, data tampering and or denial of service.
Risk Assessment: High risk of full system compromise or unavailability of service.
Description
Multiple vulnerabilities have been reported in NVIDIA products details of which are provided below:
Solution
Apply appropriate fixes as mentioned in NVIDIA Security Advisory: https://nvidia.custhelp.com/app/answers/detail/a_id/5712 https://nvidia.custhelp.com/app/answers/detail/a_id/5718 https://nvidia.custhelp.com/app/answers/detail/a_id/5723 https://nvidia.custhelp.com/app/answers/detail/a_id/5724
Vendor Information
NVIDIA https://www.nvidia.com/en-in/
References
NVIDIA https://nvidia.custhelp.com/app/answers/detail/a_id/5712 https://nvidia.custhelp.com/app/answers/detail/a_id/5718 https://nvidia.custhelp.com/app/answers/detail/a_id/5723 https://nvidia.custhelp.com/app/answers/detail/a_id/5724
CVE Name
CVE-2025-33186 CVE-2025-33185 CVE-2025-33202 CVE-2025-23361 CVE-2025-33178 CVE-2025-23357
Source details
- Source
- Indian Computer Emergency Response Team
- Type
- advisory
- Published by source
- 26 Nov 2025
- Document number
- CIAD-2025-0046
- Issuing division
- CERT-In
- Coverage area
- cybersecurity