NVIDIA Openshell vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting NVIDIA Openshell: 6 record(s), with affected versions and fixes.cpe:2.3:a:nvidia:openshell
CVE-2026-65093
Critical · 9.9
CWE-427 Aug 25, 2026
Uncontrolled Search Path Element in NVIDIA Openshell
NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-65092
High · 8.5
CWE-22 Aug 25, 2026
Path Traversal in NVIDIA Openshell
NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering.
CVE-2026-65091
High · 8.8
CWE-78 Aug 25, 2026
OS Command Injection in NVIDIA Openshell
NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-65086
Medium · 6.8
CWE-78 Aug 25, 2026
OS Command Injection in NVIDIA Openshell
NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.
CVE-2026-65085
Medium · 5.2
CWE-116 Aug 25, 2026
Improper Encoding or Escaping of Output in NVIDIA Openshell
NVIDIA OpenShell for Linux contains a vulnerability in its inference proxy, where an attacker could cause an improper encoding or escaping of output. A successful exploit of this vulnerability might lead to information disclosure and data tampering.
CVE-2026-65083
Critical · 9.9
CWE-184 Aug 25, 2026
NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API…
NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.