{"id":"CVE-2026-65093","aliases":["EUVD-2026-66092","GHSA-vrm8-9q5m-p369","RHSA-2026:70694"],"status":"published","title":"NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox...","description":"NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.","severity":{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00802,"percentile":0.56944,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-427"],"published":"2026-08-25T20:15:14Z","modified":"2026-10-20T10:14:45Z","affected":[{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openshell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.116-0.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openshell-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.116-0.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-openshell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.116-0.2.hum1"}]}],"bundled":2}],"products":[{"vendor":"nvidia","product":"openshell"}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65093","tags":["US Government Resource","advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65093","tags":["Third Party Advisory","advisory"]},{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5872","tags":["Patch","article"]},{"url":"https://github.com/advisories/GHSA-vrm8-9q5m-p369"},{"url":"https://access.redhat.com/errata/RHSA-2026:70694","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-93599","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-65093","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70694.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2523843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2538431","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93599","tags":["advisory"]},{"url":"https://github.com/rustls/webpki/security/advisories/GHSA-82j2-j2ch-gfr8","tags":["article"]},{"url":"https://www.vulncheck.com/advisories/rustls-webpki-before-0.103.13-panic-via-empty-bit-string","tags":["article"]}],"sources":{"cve":[{"id":"CVE-2026-65093","description":"NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.","status":"published","published":"2026-08-25T20:15:14.902Z","modified":"2026-08-26T15:14:45.58Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T13:37:02.780526Z"}],"euvd":[{"id":"EUVD-2026-66092","description":"NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.","status":"published","published":"2026-08-25T20:15:14Z","modified":"2026-08-26T15:14:45Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:01:30.898869Z"}],"ghsa":[{"id":"GHSA-vrm8-9q5m-p369","title":"NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox...","description":"NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.","status":"published","published":"2026-08-25T21:31:31Z","modified":"2026-08-25T21:31:36Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T15:10:58.645101Z"}],"nvd":[{"id":"CVE-2026-65093","description":"NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.","status":"published","published":"2026-08-25T21:17:29.3Z","modified":"2026-09-01T18:51:41.977Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:12:41.347728Z"}],"osv":[{"id":"RHSA-2026:70694","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-09-24T10:15:05Z","modified":"2026-10-20T10:14:45Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"}]}}