NVIDIA OpenShell Linux Sandbox API Input Validation Flaw

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: NVIDIA Corporation

Description

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-08-25

Generated

2026-08-26

AI Q&A

2026-08-26

EPSS Evaluated

N/A

NVD

CVE-2026-65083

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	openshell	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-184	The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete.

Attack-Flow Graph

Executive Summary

NVIDIA OpenShell for Linux has a flaw in its sandbox provisioning API where an attacker can bypass input restrictions. This could allow them to execute arbitrary code, gain higher privileges, access sensitive information, alter data, or disrupt services.

Impact Analysis

If exploited, this vulnerability could let attackers take control of your system, steal data, modify files, or crash services. It primarily affects systems running NVIDIA OpenShell on Linux.

Mitigation Strategies

Apply the latest security patches or updates provided by NVIDIA for OpenShell. Disable or restrict access to the sandbox provisioning API if not required. Monitor network traffic for unusual activity related to OpenShell services.

Hi! I’m here to help you understand CVE-2026-65083. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70