CVE-2026-65162

10.0 Critique

Publiée le 13/10/2026 à 15:17 · Modifiée le 13/10/2026 à 18:18 · En attente d'analyse NVD · Source : psirt@nvidia.com

Description

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.

Traduire en français

Produits concernés

NVIDIA AIStore framework

Scores CVSS

Version	Score	Source	Vecteur
3.1	10.0 Critique	psirt@nvidia.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-250

Références

https://github.com/NVIDIA/product-security/tree/main/2026/5889
https://nvd.nist.gov/vuln/detail/CVE-2026-65162
https://www.cve.org/CVERecord?id=CVE-2026-65162

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories