CVE-2026-65141

Published: Oct 13, 2026Modified: Oct 13, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.

Related CWEs

CWE-95

Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").

References (3)

https://github.com/NVIDIA/product-security/tree/main/2026/5902

Source: psirt@nvidia.com

https://nvd.nist.gov/vuln/detail/CVE-2026-65141

Source: psirt@nvidia.com

https://www.cve.org/CVERecord?id=CVE-2026-65141

Source: psirt@nvidia.com

Timeline

No history available yet.