CVE-2025-33229 — Uncontrolled Search Path Element in Nvidia Cuda Toolkit

CWE-427 — Uncontrolled Search Path Element7 documents7 sources
Severity
7.3HIGHNVD
EPSS
0.0%
top 94.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Nvidia Cuda Toolkit
Timeline
PublishedJan 20

Description

NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileges as the NVIDIA Nsight Visual Studio Edition Monitor application. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 1.3 | Impact: 5.9

Affected Packages2 packages

▶NVDnvidia/cuda_toolkit< 13.1.0
▶CVEListV5nvidia/cuda_toolkitAll versions prior to CUDA Toolkit 13.1

Patches

Patch: nvidia.custhelp.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-65x9-9gp9-wcq3: NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileg↗2026-01-20
▶
CVEList
CVE-2025-33229: NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileg↗2026-01-20
▶
OSV
CVE-2025-33229: NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileg↗2026-01-20
▶

📋Vendor Advisories

2
Red Hat
nsight-systems: NVIDIA Nsight Visual Studio for Windows: Arbitrary Code Execution and Privilege Escalation in Nsight Monitor↗2026-01-20
▶
Debian
CVE-2025-33229: nvidia-cuda-toolkit - NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monit...↗2025
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-33229 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2025-33229 — Uncontrolled Search Path Element | cvebase