dgx os vulnerabilities and fixes

Recent CVEs affecting dgx os, with upgrade or downgrade steps. 14 tracked.

Also searched as: dgxos.

dgx os has 14 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-11-25. Highest priority: CVE-2025-33187 (score 34/100).

• CVE-2025-33200 LOW 2.3 MITIGATE NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to
• CVE-2025-33199 LOW 3.2 MITIGATE NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause incorrect cont
• CVE-2025-33198 LOW 3.3 MITIGATE NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to
• CVE-2025-33197 MEDIUM 4.3 MITIGATE NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a NULL pointer
• CVE-2025-33196 MEDIUM 4.4 MITIGATE NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to
• CVE-2025-33195 MEDIUM 4.4 MITIGATE NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected mem
• CVE-2025-33194 MEDIUM 5.7 MITIGATE NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper proce
• CVE-2025-33193 MEDIUM 5.7 MITIGATE NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper valid
• CVE-2025-33192 MEDIUM 5.7 MITIGATE NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary m
• CVE-2025-33191 MEDIUM 5.7 MITIGATE NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid me
• CVE-2025-33190 MEDIUM 6.7 MITIGATE NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound
• CVE-2025-33189 HIGH 7.8 MITIGATE NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-boun
• CVE-2025-33188 HIGH 8.0 MITIGATE NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardw
• CVE-2025-33187 CRITICAL 9.3 MITIGATE NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain

FAQ

How do I fix dgx os vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is dgx os being exploited right now?

None of the tracked dgx os CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which dgx os CVE should I patch first?

CVE-2025-33187 currently ranks highest (34/100): NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain.

RSS feed for dgx os · ← Back to latest CVEs