NVIDIA Openshell vulnerabilities
6 CVEs affecting NVIDIA Openshell, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-65093, published 2026-08-25.
More from NVIDIA.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2026-65091, published 2026-08-25. High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days. NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data…
- CVE-2026-65086, published 2026-08-25. Medium severity, CVSS 6.8. EPSS: 2.4% chance of exploitation in the next 30 days. NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code…
- CVE-2026-65083, published 2026-08-25. Critical severity, CVSS 9.9. EPSS: 0.9% chance of exploitation in the next 30 days. NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit of this vulnerability…
- CVE-2026-65093, published 2026-08-25. Critical severity, CVSS 9.9. EPSS: 0.8% chance of exploitation in the next 30 days. NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,…
- CVE-2026-65092, published 2026-08-25. High severity, CVSS 8.5. EPSS: 0.6% chance of exploitation in the next 30 days. NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to…
- CVE-2026-65085, published 2026-08-25. Medium severity, CVSS 5.2. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA OpenShell for Linux contains a vulnerability in its inference proxy, where an attacker could cause an improper encoding or escaping of output. A successful exploit of this vulnerability might…