by Kastro
Paper/Archive/CVE-2026-65083

CVE-2026-65083

NVIDIA OpenShell — NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of…

EPSS 0.9%CVSS 9.9
critical.is priorityof 100
41
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 58.5.585 × 2011.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.

Affected

ProductAffectedFixed inSource
OpenShell0 to 0.0.33–CNA

Scores by source

nvidia (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refnvd.nist.gov/vuln/detail/CVE-2026-65083refcve.org/CVERecord?id=CVE-2026-65083refgithub.com/NVIDIA/product-security/tree/main/2026/5872