CVE-2025-23261 MEDIUM

CVE-2025-23261

Vendor Nvidia

Product NVOS

Weakness CWE-532 · Sensitive info in logs

Published September 4, 2025

Last update September 4, 2025

View on NVD All CVEs

CVSS base score

5.5/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

NVIDIA Cumulus Linux and NVOS products contain a vulnerability, where hashed user passwords are not properly suppressed in log files, potentially disclosing information to unauthorized users.

Key dates

02Disclosure timeline

September 4, 2025 CVE published

September 4, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-23261 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/532.html

Related vulnerabilities

Identifiers

CVE CVE-2025-23261

CWE CWE-532

CVSS 5.5 / MEDIUM

Affected versions

Vendor Nvidia

Product NVOS

Affected NVOS 25.02.21xx, 25.02.22xx, 25.02.23xx

Vendor Nvidia

Product Cumulus Linux

Affected Cumulus Linux 5.12, 5.11, 5.10, 5.9 and older

Vendor Nvidia

Product NVOS

Affected NVOS 25.02.3xxx

CVE-2025-23261

01Description

02Disclosure timeline

03References

04Related CVE