CVE-2025-23266: Critical severity Nvidia Container Toolkit vulnerability
NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23266?
CVE-2025-23266 has been rated as a high severity vulnerability due to its potential for privilege escalation and arbitrary code execution.
How do I fix CVE-2025-23266?
To fix CVE-2025-23266, update the NVIDIA Container Toolkit to the latest version that addresses this vulnerability.
What platforms are affected by CVE-2025-23266?
CVE-2025-23266 affects the NVIDIA Container Toolkit across all supported platforms.
What could an attacker achieve by exploiting CVE-2025-23266?
An attacker exploiting CVE-2025-23266 could potentially execute arbitrary code with elevated permissions, leading to privilege escalation or data tampering.
Is there a workaround for CVE-2025-23266 until a patch is available?
Currently, the best approach for CVE-2025-23266 is to implement strict access controls and limit the use of vulnerable hooks in container initialization.