Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

Cato CTRL™ Threat Research: New Vulnerabilities in NVIDIA NeMo and Meta PyTorch Enable Full System Compromise

Cato Networks
Cato Networks
Published April 29, 2026Original Report

Excerpt

Executive Summary Cato CTRL has discovered high-severity vulnerabilities in NVIDIA NeMo ( CVE-2025-33236 with a CVSS score of 7.8) and Meta PyTorch that turns AI model files into remote code execution (RCE) vectors. The NeMo vulnerability allows RCE by importing a malicious AI model. The NeMo framework silently executes threat actor-controlled code with no warning. The PyTorch vulnerability bypasses weights_only=True , the ecosystem’s recommended safety mechanism,…

Read the original report →

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2025-33236MediumScore 51/100First seen

IOC Relationship Graph

Building graph…