This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] NVIDIA fixes 3 high-severity vulnerabilities
NVIDIA Isaac Launchable fixes 3 high-severity vulnerabilities in version 1.1 [1][2][3].
Because components run with excessive privileges, an unauthenticated remote attacker can execute malicious code, which may lead to escalation of privileges, compromised data integrity, information disclosure or DoS [1][2].
The vulnerability is present in product:
- NVIDIA Isaac Launchable; <1.1;
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
More information:
- CVE-2025-33223 at cve.org, NVD
- CVE-2025-33224 at cve.org, NVD
- CWE-250: Execution with Unnecessary Privileges at cwe.mitre.org
The vulnerability was publicly disclosed 23. 12. 2025.
An unauthenticated remote attacker can abuse hardcoded credentials to gain unauthorized access to the system, which may subsequently lead to arbitrary code execution, escalation of privileges, DoS or data tampering [3].
The vulnerability is present in product:
- NVIDIA Isaac Launchable; <1.1;
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
More information:
- CVE-2025-33222 at cve.org, NVD
- CWE-798: Use of Hard-coded Credentials at cwe.mitre.org
The vulnerability was publicly disclosed 23. 12. 2025.
Links
By CESNET, z.s.p.o. Henrieta Paločková on 5. 1. 2026.