NVIDIA Container Toolkit vulnerabilities

7 CVEs affecting NVIDIA Container Toolkit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-23359, published 2025-02-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-0132, published 2024-09-26. High severity, CVSS 8.3. EPSS: 40.8% chance of exploitation in the next 30 days. NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain…
CVE-2025-23359, published 2025-02-12. High severity, CVSS 8.1. EPSS: 3.7% chance of exploitation in the next 30 days. NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file…
CVE-2024-0135, published 2025-01-28. High severity, CVSS 7.6. EPSS: 1.1% chance of exploitation in the next 30 days. NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability…
CVE-2024-0136, published 2025-01-28. High severity, CVSS 8.4. EPSS: 0.7% chance of exploitation in the next 30 days. NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to host devices. This…
CVE-2024-0134, published 2024-11-05. Medium severity, CVSS 4.1. EPSS: 0.4% chance of exploitation in the next 30 days. NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name…
CVE-2024-0137, published 2025-01-28. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This…
CVE-2024-0133, published 2024-09-26. Low severity, CVSS 3.4. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This…