NVIDIA Container Toolkit vulnerabilities

3 CVEs affecting NVIDIA Container Toolkit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-24260, published 2026-07-01.

More from NVIDIA.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-23266, published 2025-07-17. Critical severity, CVSS 9.0. EPSS: 3.3% chance of exploitation in the next 30 days. NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A…
• CVE-2025-23267, published 2025-07-17. High severity, CVSS 8.5. EPSS: 0.9% chance of exploitation in the next 30 days. NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A…
• CVE-2026-24260, published 2026-07-01. High severity, CVSS 8.5. EPSS: 0.5% chance of exploitation in the next 30 days. NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition. A successful exploit of this vulnerability might lead to code…