CVE-2026-65092

Received Received - Intake

Path Traversal Bypass in NVIDIA OpenShell Sandbox for Linux

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: NVIDIA Corporation

Description

NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-08-25

Generated

2026-08-26

AI Q&A

2026-08-26

EPSS Evaluated

N/A

NVD

CVE-2026-65092

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	openshell_sandbox	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

NVIDIA OpenShell Sandbox for Linux has a vulnerability that allows an attacker to bypass L7 REST network policy through path traversal. This could result in unauthorized access to sensitive data or manipulation of data.

Impact Analysis

If exploited, this vulnerability may lead to information disclosure or data tampering. Attackers could access confidential data or alter it without proper authorization.

Compliance Impact

This vulnerability could lead to unauthorized data access or tampering, which may violate GDPR or HIPAA compliance requirements for data protection and integrity.

Mitigation Strategies

Update NVIDIA OpenShell Sandbox to the latest patched version immediately to address the path traversal vulnerability. Restrict network access to the L7 REST interface and apply strict input validation for all requests.

Hi! I’m here to help you understand CVE-2026-65092. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70