CVE-2026-65093
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
NVIDIA OpenShell for Linux contains a vulnerability that could allow an attacker to escape the sandbox. Successful exploitation might lead to code execution, privilege escalation, data tampering, and information disclosure.
Risk Assessment
Sandbox escape could allow an attacker to gain full control over the system, posing a serious threat to data confidentiality and integrity.
Recommendation
Apply security updates provided by NVIDIA. Restrict access to OpenShell to trusted users only and monitor activity.
Other vulnerabilities in NVIDIA OpenShell
See all- CVE-2026-65083Critical
NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. Successful exploitation might lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.
- CVE-2026-65091High
NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
- CVE-2026-65086Medium
NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit might lead to code execution, information disclosure, and data tampering.
- CVE-2026-65085Medium
NVIDIA OpenShell for Linux contains a vulnerability in its inference proxy, where an attacker could cause an improper encoding or escaping of output. A successful exploit might lead to information disclosure and data tampering.
Original NVD description (English source)
NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS