high8.0
CVE-2025-33180
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command.
Impact
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nvidia | Cumulus Linux | before 5.14.0 from 5.9.0 before 5.9.4 from 5.11.0 before 5.11.4 |
| Nvidia | Nvos | before 25.02.2452 before 25.02.4282 before 25.02.5030 |