Nemo vulnerabilitiesRanked by how likely they are to be used.
Nemo is made by Nvidia. We track 13 published vulnerabilities in it, across 51 versions. None of them is on the list of flaws known to be exploited today. If you run Nemo, keep it on a version the vendor still supports.
We keep watching the known-exploited list.
Which Nemo vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Nemo's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Nemo flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 1.1%CVE-2025-23304High
NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata.
- 0.7%CVE-2025-23251High
NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution.
- 0.7%CVE-2025-23249High
NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution.
- 0.6%CVE-2025-23250High
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write.
- 0.6%CVE-2024-0081High
NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling.
- 0.6%CVE-2025-23303High
NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution.
- 0.5%CVE-2025-23360High
NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write.
- 0.3%CVE-2022-22821Medium
NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available.
- 0.3%CVE-2025-23313High
NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue.
- 0.2%CVE-2025-23312High
NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attacker could cause a code injection.
Running Nemo? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering.
- Matched to
- Nemo on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 13 published vulnerabilities listed under the name Nemo, across 51 versions.
None of Nemo's vulnerabilities is on the list of flaws known to be exploited today.
Create a Precursor Intelligence account and track Nemo. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.