Vulnerabilidades do NVIDIA Openshell
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam NVIDIA Openshell: 6 registro(s), com versões afetadas e correções.cpe:2.3:a:nvidia:openshell
CVE-2026-65093
Crítica · 9.9
CWE-427 25/08/2026
Uncontrolled Search Path Element em NVIDIA Openshell
NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-65092
Alta · 8.5
CWE-22 25/08/2026
Path Traversal em NVIDIA Openshell
NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering.
CVE-2026-65091
Alta · 8.8
CWE-78 25/08/2026
OS Command Injection em NVIDIA Openshell
NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-65086
Média · 6.8
CWE-78 25/08/2026
OS Command Injection em NVIDIA Openshell
NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.
CVE-2026-65085
Média · 5.2
CWE-116 25/08/2026
Improper Encoding or Escaping of Output em NVIDIA Openshell
NVIDIA OpenShell for Linux contains a vulnerability in its inference proxy, where an attacker could cause an improper encoding or escaping of output. A successful exploit of this vulnerability might lead to information disclosure and data tampering.
CVE-2026-65083
Crítica · 9.9
CWE-184 25/08/2026
NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API…
NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.