VULNERABILITY INTELLIGENCE

CVE-2026-65086

CVSS score6.8 MEDIUM

EPSS probability2.45%

CISA KEVNot currently listed

Published2026-08-25

Last modified2026-09-03

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Description

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.

Weakness classification

psirt@nvidia.com: CWE-78

Primary references

psirt@nvidia.com — Product
psirt@nvidia.com — US Government Resource, Third Party Advisory
psirt@nvidia.com — Third Party Advisory