NVIDIA has disclosed two critical code injection vulnerabilities affecting its Isaac-GR00T robotics platform, tracked as CVE-2025-33183 and CVE-2025-33184. Both flaws reside in Python components and could allow authenticated attackers with local, low-level privileges to execute arbitrary code, escalate privileges, and modify system data. The vulnerabilities impact all versions of Isaac-GR00T N1.5 across all platforms, posing significant risks to industrial automation, research facilities, and autonomous system deployments. Each vulnerability carries a high CVSS score of high, indicating the need for immediate attention.

The root cause of these vulnerabilities is improper handling of user-supplied input within Python components, classified under CWE-94 (Improper Control of Generation of Code). Exploitation requires no user interaction and could result in complete system compromise, including unauthorized code execution, privilege escalation, data modification, and potential disclosure of sensitive information. Historically, interpreted code environments like Python have been targeted due to these weaknesses, increasing the likelihood of real-world attacks.

NVIDIA has addressed the vulnerabilities with a software update available via GitHub commit 7f53666 in the Isaac-GR00T repository. Organizations running Isaac-GR00T are strongly advised to update their deployments immediately to incorporate the patched code branch. For organizations unable to patch promptly, NVIDIA recommends restricting local system access and monitoring for any suspicious activity to mitigate exploitation risks.

The vulnerabilities were responsibly disclosed by a Researcher, demonstrating the importance of coordinated vulnerability research. NVIDIA’s Product Security Incident Response Team (PSIRT) continues to monitor for active exploitation attempts, emphasizing the urgent need for remediation. Administrators should prioritize deployment of the security update to ensure the integrity of critical robotic operations and protect against potential system compromise.