CVE-2025-23266

criticalpriority · track · 11EPSS 0.033 · 89 %ileexploit · PoCDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

5 exploits · PoC

Likely / severe?

3.32% (89th) EPSS

CVSS 9 · critical

Is it mine?

14 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-24

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.

cvss

Technical severity, 0–10. One row per scoring source.

9.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.5–9

v3.19criticalAV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19criticalCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsecondary · ENISA EU

v3.19criticalCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsecondary · psirt@nvidia.comexploitability 2.3 · impact 6

v3.19criticalCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsecondary · OSV

v3.18.5highCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-426USCWE-426USCWE-426US

exploits (5)

Public proof-of-concept and weaponised exploit code.

affected products (14)

Products and version ranges known to be affected.

Docker Desktop <4.44all versionscert_bundDE
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Docker Desktop< 4.44cert_bundDE
NVIDIA Container Toolkit≤ NVIDIA Container Toolkit All versions up to and including 1.17.7 (CDI mode only for versions prior to 1.17.5)enisa_euvdEU
NVIDIA Container Toolkit≤ NVIDIA GPU Operator All versions up to and including 25.3.0 (CDI mode only for versions prior to 25.3.0)enisa_euvdEU
NVIDIA Corp. NVIDIA Container Toolkit≤ 1.17.8fstec_bduRU
NVIDIA Corp. NVIDIA GPU Operator≤ 25.3.1fstec_bduRU
АО «СберТех» Platform V SberLinux OS Server≤ 9.2.0-fstecfstec_bduRU
ООО «Ред Софт» РЕД ОС≤ 7.3fstec_bduRU
Go github.com/NVIDIA/gpu-operatorall versionsosvUSpkg:golang/github.com/NVIDIA/gpu-operator
Go github.com/NVIDIA/gpu-operator< 25.3.2osvUSpkg:golang/github.com/NVIDIA/gpu-operator
Go github.com/NVIDIA/k8s-device-plugin< 0.17.3osvUSpkg:golang/github.com/NVIDIA/k8s-device-plugin
Go github.com/NVIDIA/mig-parted< 0.12.2osvUSpkg:golang/github.com/NVIDIA/mig-parted
Go github.com/NVIDIA/nvidia-container-toolkit< 1.17.8osvUSpkg:golang/github.com/NVIDIA/nvidia-container-toolkit

advisories (3)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2025-1743Docker Desktop: Schwachstelle ermöglicht PrivilegieneskalationDeutsch2025-08-06csaf · cert_bundDE
Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in dem mit Docker Desktop ausgelieferten NVIDIA Container Toolkit ausnutzen, um seine Privilegien zu erhöhen.
GHSA-vmg3-7v43-9g23NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path2025-07-17ghsa · osvUS
NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.
GO-2025-3992NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator2025-10-23vendor · osvUS
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2.

also known as (6)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv cert_bund NVD CVE.org MITRE

published 2025-07-17modified 2026-06-17

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan