{
 "id": "AIR-2025-0502",
 "slug": "cve-2025-33204-nvidia-nemo-framework-code-injection-vulnerab",
 "title": "CVE-2025-33204: NVIDIA NeMo Framework Code Injection Vulnerability",
 "summary": "Malicious data crafted by an attacker can cause code injection within NLP and LLM components of the NVIDIA NeMo Framework. Successful exploitation may lead to code execution, privilege escalation, and data tampering without reported field incidents.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "NVIDIA NeMo Framework"
 ],
 "incident_date": "2025-11-25",
 "incident_date_precision": "day",
 "first_reported": "2025-11-25",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33204",
   "publisher": "NVD",
   "title": "CVE-2025-33204: NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by…",
   "published_at": "2025-11-25"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2025-33204",
  "code-injection",
  "llm-security"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}