CVE-2025-33223CWE-250

CVE-2025-33223

Critical · published December 23, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
52.3
In the wild
Unconfirmed
What it is

🚨 A single exploit in NVIDIA Isaac Launchable could grant an attacker unnecessary high-level privileges! 🔥 Picture a restaurant where the chef has an extra key that lets them into any part of the kitchen — from the safe with the secret recipes to the pantry stocked with ingredients. This vulnerability allows unauthorized users to execute code as if they were the head chef, bypassing security checks entirely! This could lead to absolute chaos — an attacker could run malicious code, escalate privileges, access sensitive information, and even tamper with or delete data. In a worst-case scenario, this could cause a complete denial of service! Talk about a recipe for disaster!

Put simply

Picture a restaurant where the chef has an extra key that lets them into any part of the kitchen — from the safe with the secret recipes to the pantry stocked with ingredients. This vulnerability allows unauthorized users to execute code as if they were the head chef, bypassing security checks entirely! The vulnerability in NVIDIA Isaac Launchable allows malicious code execution due to excessive privileges granted to the attacker. This means they can perform actions beyond their intended access level, leading to potential system compromise.

What to do

This could lead to absolute chaos — an attacker could run malicious code, escalate privileges, access sensitive information, and even tamper with or delete data. In a worst-case scenario, this could cause a complete denial of service! Talk about a recipe for disaster! Mitigate this risk by updating to the fixed version as soon as it's available. Ensure that access controls are correctly implemented, and audit permissions regularly to prevent unauthorized access. Implement strong monitoring to detect any suspicious activity! You've got this! Stay vigilant, follow these steps, and you'll bolster your defenses in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00692 · 52.3th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2025-12-23T22:15Z
Affected products (1)
ProductVersionsFixed in
nvidia/isaac_launchableall versions—
References (3)
EPSS history
Timeline
  • 23 DEC 17:10Z
    NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges
    cvelistv5