Nvidia Nemo Framework vulnerabilities

CVE-2025-23304 [CRITICAL] CWE-22 CVE-2025-23304: NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering.

CVE-2025-23303 [CRITICAL] CWE-502 CVE-2025-23303: NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserial NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering.