What is the CVSS score of CVE-2025-33176?

CVE-2025-33176 has a CVSS 3.1 base score of 6.2 (Medium). CVSS vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Nvidia are affected by CVE-2025-33176?

Organizations using NVIDIA RunAI for all platforms should be aware of moderate risk from CVE-2025-33176 rated CVSS 6.2. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-33176?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Nvidia CVE-2025-33176

MEDIUM

Improper Restriction of Communication Channel to Intended Endpoints (CWE-923)

2025-11-04 psirt@nvidia.com

Information Disclosure Nvidia

6.2

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:20 vuln.today

CVE Published

Nov 04, 2025 - 20:17 nvd

MEDIUM 6.2

DescriptionNVD

NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communications channels on an adjacent network. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and information disclosure.

AnalysisAI

NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communications channels on an adjacent network. Rated medium severity (CVSS 6.2). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-923. NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communications channels on an adjacent network. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and information disclosure.

Affected ProductsAI

See vendor advisory for affected versions.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More from same product – last 7 days

CVE-2026-46017 Awaiting Data

May 27

In the Linux kernel, the following vulnerability has been resolved: mm: fix deferred split queue races during migration

CVE-2025-33176 vulnerability details – vuln.today

Back