CNNVD-202508-1408 Information

CNNVD ID

CNNVD-202508-1408

CVE-2025-23296

  • CNNVD Published: 2025-08-13

Description (Chinese)

NVIDIA Isaac-GR00T是美国英伟达(NVIDIA)公司的一个开放式基础模型平台。 NVIDIA Isaac-GR00T存在代码注入漏洞,该漏洞源于Python组件可能导致代码注入,可能导致代码执行、权限提升、信息泄露和数据篡改。

Description (English)

NVIDIA Isaac-GR00T is an open base model platform for the United States company NVIDIA. NVIDIA Isaac-GR00T has a code-injecting loophole, which stems from the Python component and may result in code-injection, power-up, information leak and data manipulation.

Hazard Level

Medium

Vulnerability Type

代码注入

Affected Vendor

英伟达

Published

2025-08-13

Last Modified

2026-02-24

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23296 https://nvidia.custhelp.com/app/answers/detail/a_id/5681 https://www.cve.org/CVERecord?id=CVE-2025-23296

Patch

https://nvidia.custhelp.com/app/answers/detail/a_id/5681

Share on: