CVE-2025-23266

CVE Enrichment

CVSS: 9.0 CRITICAL
EPSS: 3.28%
EPSS Percentile: 88.15%
CISA KEV: Not listed

Description

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: psirt@nvidia.com
Published: 18-Jul-2025 03:15
Last Modified: 17-Jun-2026 15:53
EPSS Date: 2026-10-12
CWE: CWE-426

CVSS Vector


            CVSS:3.1                            AV:A /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:C /
                            C:H /
                            I:H /
                            A:H

References

Last enrichment sync: 12-Oct-2026 23:27
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

including CVE-2025-49844 (ZDI-25-933), a critical use-after-free vulnerability in Redis, and CVE-2025-23266 (ZDI-25-626), a privilege escalation flaw in the Nvidia Container Toolkit. Pwn2Own Berlin 2026 Exposes Security Weaknesses Across AI Tools

CVE (1)

People (2)

Vendors (5)

Products (12)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.