Main Vulnerability Database Vulnerabilities #VU113763

Untrusted search path in NVIDIA Container Toolkit and NVIDIA GPU Operator - CVE-2025-23266

Published: August 7, 2025 / Updated: September 5, 2025

Vulnerability identifier: #VU113763

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-23266

CWE-ID: CWE-426

Exploitation vector: Local access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to usage of an untrusted search path. A local user can place a malicious binary into a specific location on the system and execute arbitrary code with escalated privileges.

Affected software

NVIDIA Container Toolkit
NVIDIA GPU Operator
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Containers Module
openSUSE Leap
Fedora
Docker Desktop
toolbox (Red Hat package)
toolbox
nvidia-container-toolkit

How to mitigate CVE-2025-23266

Install updates from vendor's website.

NVIDIA Container Toolkit - update to 1.17.8
NVIDIA GPU Operator - update to 25.3.1
Docker Desktop - update to 4.44.0
toolbox (Red Hat package) - addressed in versions 0.2-1.el9_6, 0.2-1.el10_0
toolbox - addressed in versions 0.2-1.fc41, 0.2-1.fc42
nvidia-container-toolkit - update to 1.18.0-150200.5.17.1

Links to Public Exploits and PoC-codes

External References

https://nvidia.custhelp.com/app/answers/detail/a_id/5659