CVE-2025-33186CWE-798hardcoded-credentials

CVE-2025-33186

High · published November 11, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

⚡ A sneaky vulnerability in NVIDIA's AIStore could lead to escalated privileges and data tampering—it's like leaving the back door to your data open! 🔥 Think of it like a hotel where anyone can slip into the staff-only areas just by showing a generic ID badge. With this vulnerability, an attacker could gain access to sensitive data and even alter it, like a rogue employee rearranging the guest list. If exploited, this vulnerability could allow an attacker to not only access confidential information but also change or delete it at will. This could be absolutely devastating for companies relying on the integrity of their data and could lead to severe reputation damage.

Put simply

Think of it like a hotel where anyone can slip into the staff-only areas just by showing a generic ID badge. With this vulnerability, an attacker could gain access to sensitive data and even alter it, like a rogue employee rearranging the guest list. The vulnerability lies in AuthN within NVIDIA AIStore, where improper authentication could allow an attacker to escalate privileges and manipulate data.

What to do

If exploited, this vulnerability could allow an attacker to not only access confidential information but also change or delete it at will. This could be absolutely devastating for companies relying on the integrity of their data and could lead to severe reputation damage. To protect against this, patch your AIStore to the latest version as soon as it’s available, review your authentication procedures, and conduct a security audit on your data access controls. You've got this! By taking these steps, you'll strengthen your defenses and keep your data safe. 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00397 · 32.8th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2025-11-11T22:15Z
References (3)
EPSS history
Timeline
  • 11 NOV 16:20Z
    NVIDIA AIStore contains a vulnerability in AuthN
    cvelistv5