NVIDIA NSIGHT Graphics Linux Vulnerability Allows Code Execution

A critical vulnerability has been identified in NSIGHT Graphics for Linux, prompting an urgent security update. This flaw could allow attackers to execute arbitrary code on affected systems.

The flaw, tracked as CVE-2025-33206, has been rated as High severity with a CVSS score of 7.8.

The vulnerability in NVIDIA NSIGHT Graphics for Linux allows attackers to inject commands. A successful exploit could result in unauthorized code execution, privilege escalation, data tampering, or denial-of-service attacks.

The vulnerability requires local access and user interaction to trigger. However, it presents a significant risk to development and graphics-related workloads.

The weakness stems from improper input validation in command processing, classified under CWE-78 (Improper Neutralization of Special Elements used in an OS Command).

Attackers with local system access could craft malicious inputs to escape intended command contexts and execute arbitrary system commands with elevated privileges.

The attack requires local access and user interaction (UI: R), meaning an attacker must trick a user into performing a specific action.

However, once triggered, the vulnerability grants unauthorized code execution capabilities with high impact on confidentiality, integrity, and availability.

Affected Systems and Patching

All versions of NVIDIA NSIGHT Graphics for Linux before version 2025.5 are vulnerable. Organizations running NSIGHT Graphics must immediately upgrade to version 2025.5 or later to remediate the vulnerability.

Users should immediately download and install NVIDIA NSIGHT Graphics 2025.5 from the official NVIDIA developer portal.

Until patches can be deployed, organizations should restrict local access to systems running vulnerable versions and implement the principle of least privilege.

Additional details and the latest security bulletins are available on NVIDIA’s official Product Security page, which also provides subscription options for security notifications.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.