What is the CVSS score of CVE-2025-33179?

CVE-2025-33179 has a CVSS 3.1 base score of 8.0 (High). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Nvos are affected by CVE-2025-33179?

NVIDIA Cumulus Linux and NVOS users face a privilege escalation risk where low-privileged accounts could gain unauthorized administrative access through the NVUE interface.

How to fix or mitigate CVE-2025-33179?

Within 24 hours: Identify all NVIDIA Cumulus Linux and NVOS deployments in your environment and document which systems expose NVUE to untrusted users. Within 7 days: Restrict NVUE interface access to trusted administrators only through network segmentation and authentication controls; disable NVUE on non-critical systems if possible. Within 30 days: Monitor NVIDIA security advisories for patch availability and establish an expedited deployment plan; conduct access reviews for accounts with NVUE permissions.

Nvos CVE-2025-33179

HIGH

Incorrect Privilege Assignment (CWE-266)

2026-02-24 psirt@nvidia.com

Linux Privilege Escalation Nvos Cumulus Linux

8.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.0 HIGH

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 24, 2026 - 20:27 nvd

HIGH 8.0

DescriptionCVE.org

NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could run an unauthorized command. A successful exploit of this vulnerability might lead to escalation of privileges.

AnalysisAI

Technical ContextAI

Affects the a vulnerability in the NVUE component of Cumulus Linux. NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could run an unauthorized command. A successful exploit of this vulnerability might lead to escalation of privileges.