CVE-2026-65083
published 2026-08-25CVE-2026-65083: NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A…
PriorityP357critical9.9CVSS 3.1
AVNACLPRLUINSCCHIHAH
EPSS
0.86%
58.1th percentile
NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nvidia | openshell | <= 0.0.33 | — |
| nvidia | openshell | — | — |
CVSS provenance
nvdv3.19.9CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
vendor_redhat9.9CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs.
ghsa_unreviewed·2026-08-25
CVE-2026-65083 [CRITICAL] CWE-184 NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs.
NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.
Red Hat
NVIDIA OpenShell: NVIDIA OpenShell: sandbox provisioning API allows code execution via incomplete input filtering
vendor_redhat·2026-08-25·CVSS 9.9
CVE-2026-65083 [CRITICAL] CWE-184 NVIDIA OpenShell: NVIDIA OpenShell: sandbox provisioning API allows code execution via incomplete input filtering
NVIDIA OpenShell: NVIDIA OpenShell: sandbox provisioning API allows code execution via incomplete input filtering
NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.
A flaw was found in NVIDIA OpenShell. The sandbox provisioning Application Programming Interface (API) fails to properly enforce restrictions on disallowed inputs. An authenticated remote attacker could exploit this vulnerability by submitting crafted input to bypass sandbox boundaries. Successful exploitation may result in arbitrary code execution, privilege esca
No detection rules found.
No public exploits indexed.
2026-08-25
Published