CVE-2025-23266
Expert Analysis
Professional remediation guidance
Get tailored security recommendations from our analyst team for CVE-2025-23266. We'll provide specific mitigation strategies based on your environment and risk profile.
CVSS Score
V3.1Attack Vector Metrics
Impact Metrics
Description
NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.
Available Exploits
Related News
Cybersecurity researchers have disclosed a critical container escape vulnerability in the NVIDIA Container Toolkit that could pose a severe threat to managed AI cloud services. The vulnerability, tracked as CVE-2025-23266, carries a CVSS score of 9.0 out of 1…
Affected Products
EU Vulnerability Database
Monitored by ENISA for EU cybersecurity
ENISA Analysis
NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.
Affected Products (ENISA)
ENISA Scoring
CVSS Score (3.1)
EPSS Score
ENISA References
Data provided by ENISA EU Vulnerability Database. Last updated: July 18, 2025
GitHub Security Advisories
Community-driven vulnerability intelligence from GitHub
Advisory Details
CVSS Scoring
CVSS Score
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
References
Advisory provided by GitHub Security Advisory Database. Published: July 17, 2025, Modified: July 17, 2025
Social Media Intelligence
Real-time discussions and threat intelligence from social platforms
NVIDIA Container Toolkit Environment Variable Handling Local Privilege Escalation Vulnerability (CVE-2025-23266)
NVIDIAScape: How vNode prevents this container breakout without the need for VMs Did you here the news about the critical vulnerability NVIDIAScape? Wiz Research discovered the NVIDIAScape vulnerability (CVE-2025-23266), it exposed a container escape path via the NVIDIA Container Toolkit. The easy answer? Patch ASAP (upgrade NVIDIA Container Toolkit > …
NVIDIAScape - NVIDIA AI Vulnerability (CVE-2025-23266) - Escape in NVIDIA Container Toolkit