CVE-2026-65131: Medium severity Nvidia NVSentinel for Linux vulnerability
NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A local attacker with high privileges can exploit the unauthenticated gRPC health-event interface through its world-writable Unix domain socket. Network access and user interaction are not required.
What is the likely impact of exploitation?
Successful exploitation may cause a denial of service. The provided severity vector indicates no confidentiality or integrity impact.
Which interface should defenders investigate?
Investigate the platform-connectors component and its gRPC health-event interface, specifically the Unix domain socket that is world-writable. Confirm whether access to that socket is restricted or whether unauthenticated local processes can connect.