BaseFortify

Publication date: 2025-11-04

Last updated on: 2025-11-06

Assigner: NVIDIA Corporation

Description

NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communications channels on an adjacent network. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-04

Last Modified

2025-11-06

Generated

2026-07-06

AI Q&A

2025-11-04

EPSS Evaluated

2026-07-05

NVD

CVE-2025-33176

EUVD

EUVD-2025-37841

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	runai	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-923	The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.

Attack-Flow Graph

Executive Summary

This vulnerability in NVIDIA RunAI allows a user to improperly restrict communication channels on an adjacent network. Exploiting this flaw could enable the attacker to escalate privileges, tamper with data, and disclose information.

Impact Analysis

The impact includes potential escalation of privileges, data tampering, and information disclosure, which could compromise system security and data integrity.

Hi! I’m here to help you understand CVE-2025-33176. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70