CVE-2025-23360: Path Traversal in NVIDIA NeMo Framework

The core of this vulnerability lies in the framework's handling of file paths. An attacker can craft malicious input that bypasses intended security checks, allowing them to specify a path outside of the intended directory. This effectively allows them to write files to locations they shouldn't have access to. Successful exploitation could result in the attacker overwriting critical configuration files, injecting malicious code into the system, or exfiltrating sensitive data. The potential for code execution significantly expands the attack surface, enabling further compromise of the system running the NeMo Framework. While specific real-world exploitation examples are not yet publicly available, the potential for impact is substantial, particularly in environments where the framework is used for sensitive data processing or model training.

1. Reserved2025-01-14
2. Published2025-03-11
3. EPSS updated2026-04-02

The primary mitigation for CVE-2025-23360 is to upgrade to NVIDIA NeMo Framework version 24.12 or later. If an immediate upgrade is not feasible, consider implementing stricter input validation on any file paths used within the framework. This could involve whitelisting allowed characters or enforcing path length restrictions. Additionally, configure the framework with the principle of least privilege, limiting its access to only the necessary files and directories. Review and harden file system permissions to prevent unauthorized write access. After upgrading, verify the fix by attempting to trigger the path traversal vulnerability with known malicious input and confirming that the attempt is blocked.