NVIDIA NeMo
Filed as: NVIDIA NeMo Framework, NeMo Framework, NVIDIA NeMo Agent Toolkit, NVIDIA NeMo Speech, NVIDIA NeMo Curator, NVIDIA NeMo Export-Deploy, NVIDIA Nemo Framework
Newest record 2026-11-10 · 44 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Exploited or KEV-listed · 0
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
No record for NVIDIA NeMo has confirmed exploitation or a KEV flag.
Disclosures by month · last 24 months
Disclosed CVEs, no confirmed exploitation · 44
- closed5.3NVIDIA NeMo CVE-2026-100962: NVIDIA NeMo Export-Deploy SSRF Vulnerability
Disclosed · since 10 Nov 2026 · CVE-2026-100962
AI - closed8.4NVIDIA NeMo CVE-2026-65151: NVIDIA NeMo Agent Toolkit SQL injection vulnerability
Disclosed · since 27 Oct 2026 · CVE-2026-65151
AI - closed10.0NVIDIA NeMo CVE-2026-65145: NVIDIA NeMo Agent Toolkit missing authentication vulnerability
Disclosed · since 27 Oct 2026 · CVE-2026-65145
AI - closed7.8NVIDIA NeMo CVE-2026-65111: NVIDIA NeMo Speech Code Injection Vulnerability
Disclosed · since 22 Sep 2026 · CVE-2026-65111
AI - closed7.8NVIDIA NeMo CVE-2026-24239: NVIDIA NeMo Speech Remote Code Execution Vulnerability
Disclosed · since 22 Sep 2026 · CVE-2026-24239
AI - closed7.8NVIDIA NeMo CVE-2026-65178: NVIDIA NeMo Vulnerability Allows Code Execution via Malicious Config
Disclosed · since 22 Sep 2026 · CVE-2026-65178
AI - closed8.8NVIDIA NeMo CVE-2026-65179: Insecure pickle deserialization in NVIDIA NeMo
Disclosed · since 22 Sep 2026 · CVE-2026-65179
AI - closed7.8NVIDIA NeMo CVE-2026-24267: Remote code execution in NVIDIA NeMo Speech
Disclosed · since 22 Sep 2026 · CVE-2026-24267
AI - closed7.8NVIDIA NeMo CVE-2026-24252: OS command injection vulnerability in NVIDIA NeMo for Linux
Disclosed · since 27 Jul 2026 · CVE-2026-24252
AI - closed7.8NVIDIA NeMo CVE-2026-24155: NVIDIA NeMo Framework contains code injection vulnerability
Disclosed · since 16 Jun 2026 · CVE-2026-24155
AI - closed7.8NVIDIA NeMo CVE-2026-24228: NVIDIA NeMo Framework vulnerable to insecure deserialization
Disclosed · since 16 Jun 2026 · CVE-2026-24228
AI - closed7.8NVIDIA NeMo CVE-2026-24159: NVIDIA NeMo Framework remote code execution vulnerability
Disclosed · since 24 Mar 2026 · CVE-2026-24159
AI - closed7.8NVIDIA NeMo CVE-2026-24157: NVIDIA NeMo Framework checkpoint loading vulnerability allows RCE
Disclosed · since 24 Mar 2026 · CVE-2026-24157
AI - closed7.8NVIDIA NeMo CVE-2025-33252: RCE vulnerability in NVIDIA NeMo Framework
Disclosed · since 18 Feb 2026 · CVE-2025-33252
AI - closed7.8NVIDIA NeMo CVE-2025-33251: RCE vulnerability in NVIDIA NeMo Framework
Disclosed · since 18 Feb 2026 · CVE-2025-33251
AI - closed7.8NVIDIA NeMo CVE-2025-33250: RCE vulnerability in NVIDIA NeMo Framework
Disclosed · since 18 Feb 2026 · CVE-2025-33250
AI - closed8.0NVIDIA NeMo CVE-2025-33245: NVIDIA NeMo Framework RCE Vulnerability
Disclosed · since 18 Feb 2026 · CVE-2025-33245
AI - closed7.8NVIDIA NeMo CVE-2025-33236: NVIDIA NeMo Framework Code Injection Vulnerability
Disclosed · since 18 Feb 2026 · CVE-2025-33236
AI - closed7.8NVIDIA NeMo CVE-2025-33243: NVIDIA NeMo Framework Distributed RCE Vulnerability
Disclosed · since 18 Feb 2026 · CVE-2025-33243
AI - closed7.8NVIDIA NeMo CVE-2025-33241: NVIDIA NeMo Framework RCE Vulnerability
Disclosed · since 18 Feb 2026 · CVE-2025-33241
AI - closed7.8NVIDIA NeMo CVE-2025-33253: NVIDIA NeMo Framework RCE Vulnerability
Disclosed · since 18 Feb 2026 · CVE-2025-33253
AI - closed7.8NVIDIA NeMo CVE-2025-33249: Code injection vulnerability in NVIDIA NeMo Framework
Disclosed · since 18 Feb 2026 · CVE-2025-33249
AI - closed7.8NVIDIA NeMo CVE-2025-33246: Command injection vulnerability in NVIDIA NeMo Framework
Disclosed · since 18 Feb 2026 · CVE-2025-33246
AI - closed7.8NVIDIA NeMo CVE-2025-33226: NVIDIA NeMo Framework Code Injection Vulnerability
Disclosed · since 16 Dec 2025 · CVE-2025-33226
AI - closed7.3NVIDIA NeMo CVE-2025-33212: NVIDIA NeMo Framework Model Loading Vulnerability
Disclosed · since 16 Dec 2025 · CVE-2025-33212
AI - closed7.6NVIDIA NeMo NVIDIA NeMo Agent Toolkit SSRF Vulnerability CVE-2025-33203
Disclosed · since 25 Nov 2025 · CVE-2025-33203
AI - closed7.3NVIDIA NeMo CVE-2025-33205: NVIDIA NeMo Framework Variable Inclusion Vulnerability
Disclosed · since 25 Nov 2025 · CVE-2025-33205
AI - closed7.8NVIDIA NeMo CVE-2025-33204: NVIDIA NeMo Framework Code Injection Vulnerability
Disclosed · since 25 Nov 2025 · CVE-2025-33204
AI - closed7.8NVIDIA NeMo CVE-2025-33178: Code injection vulnerability in NVIDIA NeMo bert services
Disclosed · since 11 Nov 2025 · CVE-2025-33178
AI - closed7.8NVIDIA NeMo CVE-2025-23361: Script vulnerability in NVIDIA NeMo Framework
Disclosed · since 11 Nov 2025 · CVE-2025-23361
AI - closed7.8NVIDIA NeMo CVE-2025-23307: NVIDIA NeMo Curator code injection vulnerability
Disclosed · since 26 Aug 2025 · CVE-2025-23307
AI - closed7.8NVIDIA NeMo CVE-2025-23314: NVIDIA NeMo Framework code injection vulnerability
Disclosed · since 26 Aug 2025 · CVE-2025-23314
AI - closed7.8NVIDIA NeMo CVE-2025-23313: NVIDIA NeMo Framework code injection vulnerability
Disclosed · since 26 Aug 2025 · CVE-2025-23313
AI - closed7.8NVIDIA NeMo CVE-2025-23312: NVIDIA NeMo Framework Retrieval Services Code Injection
Disclosed · since 26 Aug 2025 · CVE-2025-23312
AI - closed7.8NVIDIA NeMo CVE-2025-23315: NVIDIA NeMo Framework Export Component Code Injection
Disclosed · since 26 Aug 2025 · CVE-2025-23315
AI - closed7.8NVIDIA NeMo CVE-2025-23303: NVIDIA NeMo Framework Deserialization Vulnerability
Disclosed · since 13 Aug 2025 · CVE-2025-23303
AI - closed7.8NVIDIA NeMo CVE-2025-23304: NVIDIA NeMo Model Loading Code Injection Vulnerability
Disclosed · since 13 Aug 2025 · CVE-2025-23304
AI - closed7.6NVIDIA NeMo CVE-2025-23249: Deserialization Vulnerability in NVIDIA NeMo Framework
Disclosed · since 22 Apr 2025 · CVE-2025-23249
AI - closed7.6NVIDIA NeMo CVE-2025-23251: Remote Code Execution Vulnerability in NVIDIA NeMo
Disclosed · since 22 Apr 2025 · CVE-2025-23251
AI - closed7.6NVIDIA NeMo CVE-2025-23250: Path Traversal Vulnerability in NVIDIA NeMo Framework
Disclosed · since 22 Apr 2025 · CVE-2025-23250
AI - closed7.1NVIDIA NeMo CVE-2025-23360: NVIDIA Nemo Framework path traversal vulnerability
Disclosed · since 11 Mar 2025 · CVE-2025-23360
AI - closed6.3NVIDIA NeMo CVE-2024-0129: NVIDIA NeMo path traversal vulnerability
Disclosed · since 15 Oct 2024 · CVE-2024-0129
AI - closed8.6NVIDIA NeMo CVE-2024-0081: NVIDIA NeMo Framework Denial of Service Vulnerability
Disclosed · since 5 Apr 2024 · CVE-2024-0081
AI - closed4.4NVIDIA NeMo CVE-2022-22821: NVIDIA NeMo ASR WebApp Path Traversal
Disclosed · since 10 Jan 2022 · CVE-2022-22821
AI
Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.