EUVD-2026-61103
GHSA-xqjq-frh8-2qr2
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local attack vector confirmed by description; low-privilege local account sufficient per CWE-250 pattern; full triad impact reflects root-equivalent escalation on the switch.
Primary rating from Vendor (nvidia).
CVSS VectorVendor: nvidia
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful exploit of this vulnerability might lead to escalation of privileges.
Articles & Coverage 1
AnalysisAI
Local privilege escalation in NVIDIA Cumulus Linux exposes network switch operating systems to full compromise by unprivileged local users. The flaw resides in the user management component, where improper privilege assignment (CWE-250) allows a low-privileged authenticated user to escalate to higher privilege levels - likely root - with low attack complexity and no user interaction required. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an existing authenticated local user account on the Cumulus Linux system - the attacker must be able to execute code locally on the switch, either via SSH login, console access, or lateral movement from an adjacent managed host. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H accurately characterizes a realistic local privilege escalation: attack is local (requiring existing foothold or physical/SSH access to the switch), low complexity (no race conditions or special timing), low privileges (a standard unprivileged user account suffices), and no user interaction is needed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has obtained a low-privileged shell on a Cumulus Linux network switch - whether through stolen credentials, SSH brute force, or lateral movement from a managed host - identifies a misconfigured or SUID-vulnerable component in the user management subsystem. By invoking this component with a crafted argument or sequence of operations, the attacker escalates to root, gaining full control over the switch's configuration, routing tables, and network traffic. … |
| Remediation | Consult the NVIDIA Product Security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5817 for the specific patched Cumulus Linux release and upgrade instructions. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all NVIDIA Cumulus Linux deployments and document current versions to determine exposure scope. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Cumulus Linux Ga
View allSame weakness CWE-250 – Execution with Unnecessary Privileges
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today