{
 "id": "AIR-2025-0503",
 "slug": "cve-2025-33205-nvidia-nemo-framework-variable-inclusion-vuln",
 "title": "CVE-2025-33205: NVIDIA NeMo Framework Variable Inclusion Vulnerability",
 "summary": "A vulnerability in a predefined variable of the NVIDIA NeMo framework allows an attacker to cause inclusion of functionality from an untrusted control sphere. The vulnerability can lead to code execution and is currently patched with no active exploits.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "NVIDIA NeMo Framework"
 ],
 "incident_date": "2025-11-25",
 "incident_date_precision": "day",
 "first_reported": "2025-11-25",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33205",
   "publisher": "NVD",
   "title": "CVE-2025-33205: NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality…",
   "published_at": "2025-11-25"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2025-33205",
  "untrusted-inclusion",
  "code-execution"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}