CVE-2025-33181
Received Received - Intake
Command Injection in NVIDIA NVUE Interface Enables Privilege Escalation

Publication date: 2026-02-24

Last updated on: 2026-02-27

Assigner: NVIDIA Corporation

Description
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-24
Last Modified
2026-02-27
Generated
2026-06-16
AI Q&A
2026-02-24
EPSS Evaluated
2026-06-14
NVD
CVE-2025-33181
EUVD
EUVD-2025-208098
Affected Vendors & Products
Showing 6 associated CPEs
Vendor Product Version / Range
nvidia cumulus_linux to 5.14.0 (exc)
nvidia cumulus_linux From 5.11.0 (inc) to 5.11.4 (exc)
nvidia cumulus_linux From 5.9.0 (inc) to 5.9.4 (exc)
nvidia nvos to 25.02.2452 (exc)
nvidia nvos to 25.02.4282 (exc)
nvidia nvos to 25.02.5030 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2025-33181 is a vulnerability in NVIDIA Cumulus Linux and NVOS products, specifically in the NVUE interface.

The flaw allows a low-privileged user to inject commands, meaning they can execute arbitrary commands that they should not normally be able to run.

This happens because the input in the NVUE interface is not properly sanitized, leading to command injection.

A successful exploit can lead to escalation of privileges, giving the attacker higher-level access than originally permitted.

Impact Analysis

Exploiting this vulnerability can allow an attacker with low privileges and local access to execute arbitrary commands on the affected system.

This can lead to escalation of privileges, meaning the attacker can gain higher-level access and control over the system.

The impact is high on confidentiality, integrity, and availability of the system, potentially allowing unauthorized data access, modification, or disruption of services.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-33181. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart