CVE-2025-33230CWE-78

NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious…

High · published January 20, 2026

CVSS v3.1
7.3
EPSS
1%
Percentile
71.6
In the wild
Unconfirmed
What it is

⚡ An attacker can exploit the .run installer of NVIDIA Nsight Systems for Linux to inject malicious OS commands — talk about a perfect recipe for disaster! Think of it like a chef who lets someone slip a mystery ingredient into the pot without checking first. The next thing you know, the entire dish is spoiled, and no one can eat! If exploited, this vulnerability could lead to unauthorized code execution, privilege escalation, and even data tampering. An attacker could wreak havoc on your system, causing denial of service and exposing sensitive information — a nightmare scenario for any organization! 🔥

Put simply

Think of it like a chef who lets someone slip a mystery ingredient into the pot without checking first. The next thing you know, the entire dish is spoiled, and no one can eat! This vulnerability arises from improper handling of the installation path in the .run installer, allowing an attacker to manipulate command execution leading to serious security breaches.

What to do

If exploited, this vulnerability could lead to unauthorized code execution, privilege escalation, and even data tampering. An attacker could wreak havoc on your system, causing denial of service and exposing sensitive information — a nightmare scenario for any organization! 🔥 Immediately patch NVIDIA Nsight Systems to the latest version to close this critical vulnerability. Additionally, consider reviewing installation procedures to ensure no malicious strings are introduced during setup. You've got this! Follow these steps, and you'll keep your systems secure and sound! 🛡️

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01364 · 71.6th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-01-20T17:55Z
EPSS history
Timeline
  • 20 JAN 17:55Z
    NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious…
    cvelistv5