Skip to content

CVE PROGRAM SOURCE RECORD8.0 High

CVE-2025-33180

NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-02-24
Updated: 2026-02-24
Assigning organization: nvidia

Description

NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA Cumulus Linux GA

Default version status: unaffected

All versions prior to 5.14 (5.13.x, 5.12.x, and older GA versions)affected

NVIDIA Cumulus Linux LTS

Default version status: unaffected

All versions prior to 5.11.4affected

NVIDIA Cumulus Linux LTS

Default version status: unaffected

All versions prior to 5.9.4affected

NVIDIA NVOS

Default version status: unaffected

All versions prior to 1.3 - 25.02.244affected

NVIDIA NVOS

Default version status: unaffected

All versions prior to 25.02.4282affected

NVIDIA NVOS

Default version status: unaffected

All versions prior to 25.02.5030affected

References