PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How Wiz found a Critical NVIDIA AI vulnerability: Deep Dive into a container escape (CVE-2024-0132)

wiz.io | research | CVE-2024-0132 | #ai-security | #cloud | #cloud-security | #vulnerability | #nvidia | #container-escape | #ai-infrastructure | #cve-2024-0132 | #container-toolkit
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Wiz found CVE-2024-0132, a NVIDIA Container Toolkit flaw letting a malicious image mount the host root filesystem for full host takeover. A patch bypass (CVE-2025-23359) was fixed in Toolkit 1.17.4.
CVE
CVE-2024-0132
Published
Collected

Related coverage

vulnerability · wiz.io
Wiz Research Finds Critical NVIDIA AI Vulnerability Affecting Containers Using NVIDIA GPUs, Including Over 35% of Cloud Environments
Wiz Research uncovered CVE-2024-0132, a critical container-escape flaw in the NVIDIA Container Toolkit: a malicious container image can gain full host access. NVIDIA has patched it in version 1.16.2.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · vercel.com
DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities
Today we're releasing DeepsecBench, a benchmark that evaluates how well different models find security vulnerabilities in application code.
blog · wiz.io
Key Takeaways: AI Threat Readiness Survey Report 2026
Read the AI Threat Readiness Report 2026. Benchmark findings across 100 IT leaders on autonomous agent sprawl, identity risks, and modern cloud governance.
tool · wiz.io
NVIDIAScape - Critical NVIDIA AI Vulnerability: A Three-Line Container Escape in NVIDIA Container Toolkit (CVE-2025-23266)
Wiz Research details NVIDIAScape (CVE-2025-23266, CVSS 9.0): an OCI-hook misconfiguration in the NVIDIA Container Toolkit lets a three-line Dockerfile escape and gain root on shared AI hosts.
vulnerability · about.gitlab.com
Pillow CVE-2026-112900: How to find and fix it with GitLab
Upgrade to Pillow 13.0.0, then use dependency scanning, code search, and GitLab Duo Agent Platform to patch every affected Python project in your groups.
Back