CVE-2025-23261

NVIDIA Cumulus Linux and NVOS products contain a vulnerability, where hashed user passwords are not properly suppressed in log files, potentially disclosing information to unauthorized users.

Score

CVSS 3.1 5.5 Medium

Status

Deferred - psirt@nvidia.com

Published

2025-09-04

Last modified

2026-10-18

Weaknesses

CWE-532

Affected products

• Cumulus Linux (Nvidia)
• Nvos (Nvidia)

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-23261
• https://www.cve.org/CVERecord?id=CVE-2025-23261
• https://nvidia.custhelp.com/app/answers/detail/a_id/5655