Main
Vulnerability Database
Exploits
ID:11870 - Exploit for Untrusted search path in NVIDIA GPU Operator and NVIDIA Container Toolkit - CVE-2025-23266
ID:11870 - Exploit for Untrusted search path in NVIDIA GPU Operator and NVIDIA Container Toolkit - CVE-2025-23266
Published: August 22, 2025
Vulnerability identifier: #VU113763
Vulnerability risk: Low
CVE-ID: CVE-2025-23266
CWE-ID: CWE-426
Exploitation vector: Local access
Vulnerable software:
NVIDIA GPU Operator
NVIDIA Container Toolkit
NVIDIA GPU Operator
NVIDIA Container Toolkit
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to usage of an untrusted search path. A local user can place a malicious binary into a specific location on the system and execute arbitrary code with escalated privileges.
Remediation
Install updates from vendor's website.