---
id: 7002
title: "NVIDIAScape - Critical NVIDIA AI Vulnerability: A Three-Line Container Escape in NVIDIA Container Toolkit (CVE-2025-23266)"
cve: CVE-2025-23266
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/nvidia-ai-vulnerability-cve-2025-23266-nvidiascape"
published_at: "2025-07-17T14:46:47Z"
tags: ["ai-security", "container-security", "nvidia", "container-escape", "wiz-research", "cve-2025-23266"]
phying_url: "https://phying.com/item/7002"
lang: en
---

# NVIDIAScape - Critical NVIDIA AI Vulnerability: A Three-Line Container Escape in NVIDIA Container Toolkit (CVE-2025-23266)

## Summary

Wiz Research details NVIDIAScape (CVE-2025-23266, CVSS 9.0): an OCI-hook misconfiguration in the NVIDIA Container Toolkit lets a three-line Dockerfile escape and gain root on shared AI hosts.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2025-23266
- **Published:** 2025-07-17T14:46:47Z
- **Original:** https://www.wiz.io/blog/nvidia-ai-vulnerability-cve-2025-23266-nvidiascape
- **Phying News:** https://phying.com/item/7002