CVE-2025-23266

Published Jul 17, 2025

Last updated a month ago

NVIDIA Container Toolkit

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-23266, also known as #NVIDIAScape, is a vulnerability found in the NVIDIA Container Toolkit (NCT). This toolkit is a fundamental component for many AI services offered by cloud and SaaS providers. The vulnerability stems from a misconfiguration in how the toolkit handles OCI hooks. The vulnerability allows a malicious container to bypass isolation measures and gain full root access to the host machine. An attacker could execute arbitrary code with elevated permissions, potentially leading to privilege escalation, data tampering, information disclosure, and denial of service. It can be exploited using a simple three-line Dockerfile.

Description: NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.
Source: psirt@nvidia.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9
Impact score: 6
Exploitability score: 2.3
Vector string: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

psirt@nvidia.com: CWE-426

Hype score: Not currently trending

References