CVE-2025-23360CWE-23

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write

High · published March 11, 2025

CVSS v3.1
7.1
EPSS
1%
Percentile
43.0
In the wild
Unconfirmed
What it is

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00515 · 43.0th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2025-03-11T19:44Z
EPSS history
Timeline
  • 11 MAR 19:44Z
    NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write
    cvelistv5