CVE-2025-33176
Medium · 6.2CVSS
6.2
EPSS
0.2%
Published
Nov 4, 2025
CISA due date
—
The record
NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communications channels on an adjacent network. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and information disclosure.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-81871 OpenTelemetry-Go is the Go implementation of OpenTelemetry. CWE-923
- CVE-2026-57028 An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in… CWE-923
- CVE-2026-33803 An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in… CWE-923
- CVE-2026-55655 A flaw was found in OpenSSH. CWE-923
- CVE-2026-12539 Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at… CWE-923
- CVE-2026-12039 Docker Sandboxes (sbx) enforces an HTTP/S-only egress allowlist but does not apply it to… CWE-923
- CVE-2025-36145 IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and… CWE-923
- CVE-2026-22726 Route Services can be leveraged to send app traffic to network destinations outside of an… CWE-923