Back
CVE-2025-23266
NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker…
Critical9.0EPSS 3.3%
- Published
- Updated
- Reserved
- Assigned by
- nvidia
Description
NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| nvidiaCNA (assigner) | 3.1 | Critical9.0 | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
| NVDNVD · Deferred | 3.1 | Critical9.0 | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 3.3% · top 11% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.0.
Weakness
Affected products
- affected NVIDIA Container Toolkit All versions up to and including 1.17.7 (CDI mode only for versions prior to 1.17.5)
- affected NVIDIA GPU Operator All versions up to and including 25.3.0 (CDI mode only for versions prior to 25.3.0)
Affected packages
From reviewed advisories of the GitHub Advisory Database.
- Gogithub.com/NVIDIA/gpu-operatorGHSA-vmg3-7v43-9g23 (opens in a new tab)
- Gogithub.com/NVIDIA/k8s-device-pluginGHSA-vmg3-7v43-9g23 (opens in a new tab)
- Gogithub.com/NVIDIA/mig-partedGHSA-vmg3-7v43-9g23 (opens in a new tab)
- Gogithub.com/NVIDIA/nvidia-container-toolkitGHSA-vmg3-7v43-9g23 (opens in a new tab)
References (5)
- https://nvidia.custhelp.com/app/answers/detail/a_id/5659 (opens in a new tab)
- https://kidbomb.github.io/posts/nvidia-container-escape-cve-2025-23266/ (opens in a new tab)
- https://news.ycombinator.com/item?id=44818412 (opens in a new tab)
- https://www.wiz.io/blog/nvidia-ai-vulnerability-cve-2025-23266-nvidiascape (opens in a new tab)
- https://kidbomb.github.io/posts/nvidia-container-escape-cve-2025-23266-part-2/ (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisory GHSA-vmg3-7v43-9g23 (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2025-23266)Record last updated .