NVIDIA Project G-Assist CVE-2025-23347

Requires NVIDIA Project G-Assist to be installed and running, plus an existing low-privileged local account on the same host (PR:L, AV:L) - this is not remotely exploitable. The underlying weakness is CWE-276 incorrect default permissions, meaning the attacker leverages overly permissive default ACLs on a G-Assist file, directory, or service rather than a network-facing input. Limiting factors: attacker must already have local code-execution/login on the machine, and exploitation is confined to systems with the G-Assist feature enabled (an opt-in component requiring compatible NVIDIA RTX hardware); no user interaction is needed once local access is held. The exact vulnerable resource and affected versions are not specified in the available data and must be confirmed against NVIDIA advisory 5703.

This is a locally-exploitable privilege escalation flaw (CVSS:3.1 AV:L/AC:L/PR:L/UI:N) rated 7.8 HIGH, rooted in CWE-276 (Incorrect Default Permissions). The CVSS vector is internally consistent and credible: an attacker needs existing low-privileged local access (PR:L) but no user interaction, and the full C:H/I:H/A:H impact reflects the vendor's stated outcomes of code execution, privilege escalation, data tampering, DoS, and information disclosure. Real-world exploitation signals are LOW: EPSS is 0.17% (5th percentile), the CVE is NOT on CISA KEV, and no public exploit code was identified in the provided sources. The signals are therefore aligned rather than conflicting - a genuine high-severity local EoP, but not an urgent mass-exploitation priority. The local-only vector (AV:L) and prerequisite of an existing foothold materially cap the real-world risk versus a remote unauthenticated bug of the same CVSS score; prioritize patching on multi-user or shared systems where untrusted local users exist, but this is not a drop-everything internet-facing emergency.

A low-privileged local user on a machine running NVIDIA Project G-Assist abuses incorrectly set default permissions on a G-Assist file, directory, or service to inject or modify content executed at higher privilege. This yields SYSTEM/admin-level code execution and privilege escalation. No public proof-of-concept was identified in the provided data, and the attacker must already have local access to the host.