NVIDIA github.com/NVIDIA/gpu-operator vulnerabilities

Latest NVIDIA github.com/NVIDIA/gpu-operator CVEs

Newest publication first

1. CVE-2025-23266 NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path

   Published 2025-10-23

   Critical·CVSS 9.0

   NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data ta...

2. CVE-2025-23267 NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook

   Published 2025-10-23

   High·CVSS 8.5

   NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of servi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.