Vulnerability · Published Jul 31, 2025 · Assigned by nvidia
CVE-2025-23289
Medium 5.5
In plain English
A medium-severity sensitive data in logs in NVIDIA Omniverse Launcher from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.1%top 95.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
NVIDIA Omniverse Launcher for Windows and Linux contains a vulnerability in the launcher logs, where a user could cause sensitive information to be written to the log files through proxy servers. A successful exploit of this vulnerability might lead to information disclosure.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NVIDIA | NVIDIA Omniverse Launcher | All versions prior to and including 1.9.18 |
Weakness: CWE-532 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N