PT-2025-42161 · Nvidia · Nvidia Isaac Lab

Published 2025-10-14 · Updated 2025-10-14 · CVE-2025-23356

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Isaac Lab (affected versions not specified)

Description NVIDIA Isaac Lab contains a flaw in the SB3 configuration parsing component. Exploitation of this issue could result in code execution, denial of service, escalation of privileges, information disclosure, or data tampering. The vulnerability stems from improper handling of configuration data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-23356

Affected Products

Nvidia Isaac Lab

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-23356 · Security Note
• https://twitter.com/CveTodo/status/1978168037460128142 · Twitter Post
• https://nvidia.custhelp.com/app/answers/detail/a_id/5708 · Note
• https://twitter.com/CVEnew/status/1978171139986989318 · Twitter Post