CVE-2025-33230

EUVD-2026-3353
NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.3 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
nvidiaCNA
7.3 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 6%
Affected Products (NVD)
VendorProductVersion
nvidiacuda_toolkit
𝑥
< 13.1.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
nvidia-cuda-toolkit
bookworm
no-dsa
bookworm/non-free
vulnerable
bullseye/non-free
vulnerable
forky/non-free
vulnerable
sid/non-free
vulnerable
trixie
no-dsa
trixie/non-free
vulnerable
Common Weakness Enumeration
References
https://nvd.nist.gov/vuln/detail/CVE-2025-33230
https://nvidia.custhelp.com/app/answers/detail/a_id/5755
https://www.cve.org/CVERecord?id=CVE-2025-33230