RunAI Improper Network Channel Restriction (CVE-2025-33176)
CVE-2025-33176 Published on November 4, 2025
NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communications channels on an adjacent network. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and information disclosure.
Vulnerability Analysis
Weakness Type
Improper Restriction of Communication Channel to Intended Endpoints
The software establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.
Products Associated with CVE-2025-33176
Want to know whenever a new CVE is published for NVIDIA Runai? stack.watch will email you.
Affected Versions
NVIDIA RunAI Version All versions prior to 2.22.48 is affected by CVE-2025-33176Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.