CVE-2026-65091
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk69th percentile - higher than 69% of all known CVEs
Summary
NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
Risk Assessment
A malicious gateway could exploit this vulnerability to execute arbitrary commands on the system, leading to control takeover and data compromise.
Recommendation
Apply patches from NVIDIA and ensure gateways are trusted and properly configured.
Other vulnerabilities in NVIDIA OpenShell
See all- CVE-2026-65093Critical
NVIDIA OpenShell for Linux contains a vulnerability that could allow an attacker to escape the sandbox. Successful exploitation might lead to code execution, privilege escalation, data tampering, and information disclosure.
- CVE-2026-65083Critical
NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. Successful exploitation might lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.
- CVE-2026-65086Medium
NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit might lead to code execution, information disclosure, and data tampering.
- CVE-2026-65085Medium
NVIDIA OpenShell for Linux contains a vulnerability in its inference proxy, where an attacker could cause an improper encoding or escaping of output. A successful exploit might lead to information disclosure and data tampering.
Original NVD description (English source)
NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.