Introduction
An attacker with local access to a GeForce RTX system running NVIDIA Project G-Assist can use a permissions misconfiguration to escalate privileges and potentially execute arbitrary code. The vulnerability is tracked as CVE-2025-23347. It affects a wide range of consumer and enterprise deployments where G-Assist is enabled, so it is a significant concern for the organizations and individuals who rely on NVIDIA's AI assistant.
About NVIDIA and Project G-Assist
NVIDIA dominates the GPU and AI hardware market, and its products power gaming, professional visualization, and data center workloads around the world. Project G-Assist is NVIDIA's on-device AI assistant for RTX PCs. It is designed to optimize system performance and to give users voice or text-based control over hardware and software settings. Millions of GeForce RTX systems are in use, so a vulnerability in G-Assist has broad consequences for both security and operational integrity.
Technical information
CVE-2025-23347 comes from incorrect default permissions (CWE-276) on files or directories set during the installation of NVIDIA Project G-Assist components. The installation process creates or configures some files and directories with permissions that are too loose. Low-privileged local users can then write to locations that only administrative or system accounts should be able to change. An attacker with local access can use this to:
- Modify or replace G-Assist component files
- Escalate privileges by executing malicious code with elevated permissions
- Tamper with configuration or operational data
- Potentially cause denial of service or information disclosure
Exploitation requires local access and user interaction, which matches the CVSS vector AV:L/AC:L/PR:L/UI:R. The attacker needs a low-privilege account on a system where G-Assist is installed and enabled through the NVIDIA App. The issue affects both Windows (Windows 10 and 11) and supported Linux distributions, depending on the installed NVIDIA GPU Display Driver version.
The root cause is that installation creates certain directories or files with permissions that let regular users write to or modify them. This violates the principle of least privilege and leaves critical components open to tampering. The vulnerable permissions could be on configuration files, caches, plugins, or driver components associated with G-Assist.
No public code snippets or exploit scripts are available as of this writing.
Affected systems and versions
- NVIDIA Project G-Assist enabled via NVIDIA App
- GeForce RTX 30, 40, and 50 series desktop GPUs (12GB+ VRAM)
- GeForce RTX laptop GPUs (6GB+ VRAM)
- Windows 10 and Windows 11
- Supported Linux distributions
- NVIDIA GPU Display Driver versions:
- R580 branch: versions before 581.42 (Windows), before 580.95.05 (Linux)
- R570 branch: versions before 573.76 (Windows), before 570.195.03 (Linux)
- R535 branch: versions before 539.56 (Windows), before 535.274.02 (Linux)
A system is affected if Project G-Assist is installed and enabled and the system runs any of the vulnerable driver versions above.
Vendor security history
NVIDIA has a formal Product Security Incident Response Team (PSIRT) and publishes security bulletins regularly. The October 2025 bulletin disclosed several vulnerabilities, including CVE-2025-23347, CVE-2025-23309 (a DLL loading path issue), and CVE-2025-23280 (a use-after-free in the Linux drivers). NVIDIA typically releases patches promptly and distributes advisories in multiple formats. Several related privilege escalation and code execution vulnerabilities appeared in this one cycle, which suggests that NVIDIA's vulnerability management and disclosure processes are still improving.
