What is the CVSS score of CVE-2025-23360?

CVE-2025-23360 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of NVIDIA Nemo Framework are affected by CVE-2025-23360?

Organizations using NVIDIA Nemo Framework face moderate risk from CVE-2025-23360 rated CVSS 7.1. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-23360?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.

NVIDIA Nemo Framework CVE-2025-23360

HIGH

Relative Path Traversal (CWE-23)

2025-03-11 psirt@nvidia.com

Path Traversal

7.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 19:52 vuln.today

CVE Published

Mar 11, 2025 - 20:15 nvd

HIGH 7.1

DescriptionCVE.org

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering.