PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

NVIDIAScape - Critical NVIDIA AI Vulnerability: A Three-Line Container Escape in NVIDIA Container Toolkit (CVE-2025-23266)

wiz.io | tool | CVE-2025-23266 | #ai-security | #container-security | #nvidia | #container-escape | #wiz-research | #cve-2025-23266
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Wiz Research details NVIDIAScape (CVE-2025-23266, CVSS 9.0): an OCI-hook misconfiguration in the NVIDIA Container Toolkit lets a three-line Dockerfile escape and gain root on shared AI hosts.
CVE
CVE-2025-23266
Published
Collected

Related coverage

vulnerability · wiz.io
Breaking NVIDIA Triton: CVE-2025-23319 - A Vulnerability Chain Leading to AI Server Takeover
Wiz Research discloses a critical flaw chain in NVIDIA Triton Inference Server — CVE-2025-23319, 23320 and 23334 — enabling unauthenticated RCE and full server takeover; upgrade to 25.07.
research · wiz.io
How Wiz found a Critical NVIDIA AI vulnerability: Deep Dive into a container escape (CVE-2024-0132)
Wiz found CVE-2024-0132, a NVIDIA Container Toolkit flaw letting a malicious image mount the host root filesystem for full host takeover. A patch bypass (CVE-2025-23359) was fixed in Toolkit 1.17.4.
vulnerability · wiz.io
Wiz Research Finds Critical NVIDIA AI Vulnerability Affecting Containers Using NVIDIA GPUs, Including Over 35% of Cloud Environments
Wiz Research uncovered CVE-2024-0132, a critical container-escape flaw in the NVIDIA Container Toolkit: a malicious container image can gain full host access. NVIDIA has patched it in version 1.16.2.
tool · wiz.io
Wiz achieves Red Hat Vulnerability Scanner Certification
Wiz earns Red Hat Vulnerability Scanner Certification: for Red Hat images and packages, Wiz now draws vulnerability data exclusively from Red Hat feeds, cutting false positives.
tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
blog · wiz.io
“Black October” for AI Developer Platforms
A series of agentic attacks on AI Developer Platforms has been leading to LLMJacking at scale.
Back