CVE-2025-33206CWE-78

NVIDIA NSIGHT Graphics for Linux contains a vulnerability where an attacker could cause command injection

High · published January 14, 2026

CVSS v3.1
7.8
EPSS
1%
Percentile
59.5
In the wild
Unconfirmed
What it is

⚡ A sneaky command injection vulnerability lurks in NVIDIA NSIGHT Graphics for Linux! An attacker could exploit this to unleash some serious chaos! Think of it like a sneaky waiter who takes your order and then adds extra items without you knowing — that’s the kind of unexpected control this vulnerability hands over to attackers. If successfully exploited, an attacker could execute their own code, escalate their privileges, tamper with your data, or even bring services to a crashing halt. This could lead to an unexpected disaster for your systems, making it a high-risk situation that demands attention!

Put simply

Think of it like a sneaky waiter who takes your order and then adds extra items without you knowing — that’s the kind of unexpected control this vulnerability hands over to attackers. This command injection flaw allows attackers to execute arbitrary commands on your system, leading to severe consequences if they gain higher privileges and control over your environment.

What to do

If successfully exploited, an attacker could execute their own code, escalate their privileges, tamper with your data, or even bring services to a crashing halt. This could lead to an unexpected disaster for your systems, making it a high-risk situation that demands attention! To protect yourself, update to the latest version of NVIDIA NSIGHT Graphics immediately. Review your security protocols to ensure all input is properly sanitized and consider implementing additional monitoring for suspicious activities. You've got this! With the right actions, you can lock down your systems and keep your environment safe! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00908 · 59.5th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-01-14T18:30Z
EPSS history
Timeline
  • 14 JAN 18:30Z
    NVIDIA NSIGHT Graphics for Linux contains a vulnerability where an attacker could cause command injection
    cvelistv5