CVE-2026-65141
Awaiting Analysis Awaiting Analysis - Queue

Eval Injection Vulnerability in NVIDIA Isaac Lab

Vulnerability report for CVE-2026-65141, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: NVIDIA Corporation

Description

NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
NVIDIA Isaac Lab 0.0-2.3.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-95 The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in NVIDIA Isaac Lab allows an attacker to perform eval injection, which could lead to arbitrary code execution. This means an attacker might run malicious code on the affected system, potentially causing further damage.

Impact Analysis

Exploitation could result in code execution, allowing attackers to take control of the system. It may also lead to information disclosure, where sensitive data is exposed, data tampering, altering critical information, or denial of service, disrupting system availability.

Compliance Impact

This vulnerability could lead to data breaches, violating GDPR and HIPAA requirements for data protection and confidentiality. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Apply the latest security patches or updates provided by NVIDIA for Isaac Lab to address the eval injection vulnerability. Monitor NVIDIA's security bulletin for updates and follow their recommended mitigation steps.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-65141. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart