A critical code injection vulnerability in the NVIDIA NeMo Framework allows local attackers to compromise system integrity and execute arbitrary code.

This vulnerability, classified as CWE-94, involves improper control of code generation within the bert services component. Per the CVSS vector (PR:L), this flaw requires an attacker to possess local low-level privileges to inject malicious data that triggers the injection.

Successful exploitation allows an attacker to execute arbitrary code, escalate privileges, disclose sensitive information, and tamper with data. With a CVSS score of 7.8, this vulnerability poses a significant risk to the confidentiality, integrity, and availability of environments hosting the NeMo Framework. Organizations relying on this framework for AI development or model training face potential unauthorized access to proprietary model data and compute resources.

Immediate Action: Update the NVIDIA NeMo Framework to version 2.5.0 or later immediately to incorporate the security patches.

Proactive Monitoring: Monitor system logs for unusual process execution patterns or unauthorized attempts to access the bert services component.

Compensating Controls: Restrict local access to the systems hosting the NeMo Framework to authorized users only, and implement strict input validation on data processed by the bert services component to prevent malicious payloads.

Public Exploit Available: Unknown.

Given the severity of potential impacts, including code execution and privilege escalation, organizations must prioritize upgrading the NVIDIA NeMo Framework to version 2.5.0. Applying this update is the only effective way to remediate the underlying code injection flaw. Administrators should verify the patch deployment across all development and production instances to ensure comprehensive coverage.