VULNERABILITY INTELLIGENCE
CVE-2026-65083
CVSS score9.9 CRITICAL
EPSS probability0.86%
CISA KEVNot currently listed
Published2026-08-25
Last modified2026-09-03
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description
NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.
Weakness classification
- CWE-184: Incomplete List of Disallowed Inputs
Primary references
- psirt@nvidia.com — Product
- psirt@nvidia.com — US Government Resource, Third Party Advisory
- psirt@nvidia.com — Third Party Advisory