CVE-2025-23343

HIGH

NVIDIA NVDebug < 1.7.0 - Path Traversal and Arbitrary File Write

Title source: llm

Description

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to write files to restricted components. A successful exploit of this vulnerability may lead to information disclosure, denial of service, and data tampering.

References (3)

Core 3

Core References

Technical Description

https://nvd.nist.gov/vuln/detail/CVE-2025-23343

Vendor Advisory

https://nvidia.custhelp.com/app/answers/detail/a_id/5696

Technical Description

https://www.cve.org/CVERecord?id=CVE-2025-23343

Scores

CVSS v3 7.6

EPSS 0.0008

EPSS Percentile 22.8%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-22

Status published

Products (1)

nvidia/nvdebug < 1.7.0

Published Sep 09, 2025

Tracked Since Feb 18, 2026