NVIDIA Merlin Vulnerabilities Enable Code Execution and DoS Attacks

NVIDIA has released security patches for its Merlin machine learning framework due to two high-severity deserialization vulnerabilities. These vulnerabilities, identified as CVE-2025-33214 and CVE-2025-33213, could allow attackers to execute arbitrary code and launch denial-of-service attacks on affected Linux systems. The flaws were found in the NVTabular and Transformers4Rec components of the framework.