NVIDIA CUDA Toolkit Flaw Allows Command Injection, Arbitrary Code Execution

NVIDIA patched four CUDA Toolkit flaws (CVE-2025-33228–33231) in Nsight Systems and related tools that enable local OS command injection, DLL load hijacking, and arbitrary code execution with high-impact consequences (privilege escalation, data tampering, DoS, and information disclosure). Affected versions are all releases prior to CUDA Toolkit 13.1 on Windows and Linux; NVIDIA recommends immediate upgrade to 13.1 and monitoring for anomalous Nsight script invocations or DLL loads, while noting no public PoCs or IoCs have been published.