CVE-2025-33229CWE-427

NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileges as the…

High · published January 20, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
8.6
In the wild
Unconfirmed
What it is

⚡ Just a single command in NVIDIA Nsight Monitor can open the door to arbitrary code execution! 🎮 Think of it like a waiter who accidentally serves a dish that someone didn’t order—once they hand it over, anyone can tweak the recipe behind the scenes. This vulnerability allows attackers to run code with the same permissions as the Nsight Monitor itself, making it a recipe for chaos. If exploited, an attacker could escalate their privileges, execute malicious code, tamper with data, or even bring the whole application to a grinding halt. This could lead to serious ramifications like data breaches or denial of service, leaving users vulnerable and systems in jeopardy.

Put simply

Think of it like a waiter who accidentally serves a dish that someone didn’t order—once they hand it over, anyone can tweak the recipe behind the scenes. This vulnerability allows attackers to run code with the same permissions as the Nsight Monitor itself, making it a recipe for chaos. This vulnerability in NVIDIA Nsight Visual Studio for Windows allows an attacker to execute arbitrary code due to insufficient checks within the Nsight Monitor application, compromising its security integrity.

What to do

If exploited, an attacker could escalate their privileges, execute malicious code, tamper with data, or even bring the whole application to a grinding halt. This could lead to serious ramifications like data breaches or denial of service, leaving users vulnerable and systems in jeopardy. Immediately update to the latest version of NVIDIA Nsight Visual Studio to close this security gap. Regularly review and implement strong access controls to limit potential exploitation. Consider monitoring systems for unusual activity related to this application. You've got this! Strengthen your defenses and keep your systems secure! 🛡️

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00194 · 8.6th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-01-20T17:44Z
EPSS history
Timeline
  • 20 JAN 17:44Z
    NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileges as the…
    cvelistv5