NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9 | CVE-2025-23266 |
Exploitation
To exploit this vulnerability, an attacker must have access to the adjacent network and can leverage the low attack complexity to execute arbitrary code with elevated permissions. This could be achieved by manipulating the initialization hooks of the NVIDIA Container Toolkit, allowing for privilege escalation and potential data compromise.
Affected Products
- NVIDIA Container Toolkit: A toolkit that allows users to manage and run containers with NVIDIA GPUs, which is affected by the vulnerability.
Mitigation
To mitigate this vulnerability, users should ensure they are using the latest version of the NVIDIA Container Toolkit and apply any available security patches. Additionally, restricting access to the container initialization process and monitoring for unusual activity can help reduce the risk of exploitation.