CVE-2026-65086

Received Received - Intake

NVIDIA OpenShell Linux Command Injection Vulnerability

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: NVIDIA Corporation

Description

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-08-25

Generated

2026-08-26

AI Q&A

2026-08-26

EPSS Evaluated

N/A

NVD

CVE-2026-65086

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	openshell	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

NVIDIA OpenShell for Linux has a flaw in its sandbox exec handler that allows an attacker to inject OS commands. This could lead to unauthorized code execution, sensitive information being exposed, or data being altered.

Impact Analysis

If exploited, this vulnerability could allow attackers to run arbitrary commands on your system, steal data, or modify files. It requires some access but could lead to serious security breaches.

Compliance Impact

This vulnerability could lead to unauthorized access, data breaches, or data tampering, which may violate GDPR, HIPAA, or other regulations. Compliance could be compromised if sensitive data is exposed or altered.

Mitigation Strategies

Update NVIDIA OpenShell for Linux to the latest patched version immediately. Restrict access to the sandbox exec handler to authorized users only. Monitor network traffic for unusual command execution patterns.

Hi! I’m here to help you understand CVE-2026-65086. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70