EUVD-2026-66092
GHSA-vrm8-9q5m-p369
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE-427 search-path sandbox escape presumes attacker code already runs in the sandbox (AV:L, PR:L, AC:L); the escape crosses into host authority (S:C) with full C/I/A impact.
Primary rating from Vendor (nvidia).
CVSS VectorVendor: nvidia
Lifecycle Timeline
2DescriptionCVE.org
NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
Articles & Coverage 2
AnalysisAI
Sandbox escape in NVIDIA OpenShell for Linux lets a low-privileged actor already operating inside the sandbox break its isolation boundary, potentially achieving code execution, privilege escalation, data tampering, and information disclosure on the host. The flaw is rooted in an uncontrolled search path element (CWE-427), so a resource the sandbox loads can be redirected to attacker-supplied code. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to already hold low-level privileges within an OpenShell deployment (PR:L per CVSS) and to influence a search path element the sandbox resolves - that is, to write or place a malicious library, binary, or config into a directory OpenShell searches when locating a resource. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The NVD CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, base 9.9) portrays a low-complexity, low-privilege, scope-changing attack with total confidentiality, integrity, and availability impact - nominally critical. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the fix described in NVIDIA's product-security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5872; no exact fixed version number is present in the provided data, so consult that advisory for the specific patched build (no vendor-released fix version independently confirmed from available data at time of analysis). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit all systems running NVIDIA OpenShell for Linux to identify deployment scope, criticality levels, and which systems execute untrusted or third-party code within sandboxes. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Privilege escalation and remote code execution in NVIDIA OpenShell for Linux stem from an incomplete deny-list in its sa
OS command injection in NVIDIA OpenShell across all supported platforms allows a network-accessible malicious gateway to
Path traversal in NVIDIA OpenShell Sandbox for Linux permits low-privileged network-authenticated attackers to bypass L7
OS command injection in NVIDIA OpenShell for Linux's sandbox exec handler allows a low-privileged, network-accessible at
Improper output encoding in NVIDIA OpenShell's inference proxy on Linux allows a local low-privileged attacker to cause
Same weakness CWE-427 – Uncontrolled Search Path Element
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today