CVE-2026-65083

Published: Aug 25, 2026Modified: Sep 3, 2026

9.9

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.1 / Impact: 6.0

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.

Affected (1)

Products: Nvidia: Openshell

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nvidia Openshell	Up to 0.0.33

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Related CWEs

Incomplete List of Disallowed Inputs

The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete, leading to resultant weaknesses.

References (3)

https://github.com/NVIDIA/product-security/tree/main/2026/5872

Source: psirt@nvidia.com

Product

https://nvd.nist.gov/vuln/detail/CVE-2026-65083

Source: psirt@nvidia.com

US Government ResourceThird Party Advisory

https://www.cve.org/CVERecord?id=CVE-2026-65083

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.