NVIDIA has released a significant security update for its Merlin framework, addressing several high-severity vulnerabilities. These vulnerabilities could allow attackers to execute malicious code or alter sensitive data within AI recommendation pipelines. The first vulnerability, identified as CVE-2025-33214, concerns NVTabular . The issue centers on the software’s workflow, as a broad set of data processing features, designed to handle huge datasets, up to terabytes in size, presents a specific vulnerability in its workflow component. If left unpatched, this flaw opens the door to a wide range of malicious activity. NVIDIA warns that “successful exploitation of this vulnerability could lead to code execution,