repository icon
nvidia / nvidia-container-toolkit Project repository

Build and run containers leveraging NVIDIA GPUs

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN9 DAYS

FIX

WITHINN/A DAYS

Container Breakout & Host-Root Escalation via Config Path Resolution Flaw
orel-asper
duplicate
Critical
Container Escape via TOCTOU Race in CDI Hook Symlink Resolution
wernerina
duplicate
High
Container Escape via Symlink Following in chmod CDI Hook. Host Filesystem permis...
venkatatadu
pending
Container Escape and Privilege Escalation via Malicious GPU Device Mounting
sebas5207418
pending
Arbitrary File Write and Path Traversal via Unsanitized CRIO_HOOKS_DIR / CRIO_HO...
makeeverythingwithai-sketch
duplicate
High
Unchecked ELF note lengths in `enable-cuda-compat` hook cause panic and containe...
makeeverythingwithai-sketch
self closed
Command Injection via Unescaped Shell Invocation — Complete Report & Fixes
7908837174
pending
TOCTOU Race Condition in Device Node Creation Allows Arbitrary File Permission...
lea75008
pending
Pre-start root code execution inside GPU containers via update-ldcache hook pivo...
itsbalvant
pending
Local YUM Repository Disabled by Default in entrypoint.sh Scripts for CentOS 8 a...
sanjay20m
pending
Improper Input Validation in nvidia-ctk config Allows Arbitrary Key Injection in...
bahaashawish1
pending
Arbitrary Host Binary Execution via Feature-Gated ldconfig Path in NVIDIA Contai...
darkeeeandme
pending
HTTP Request Smuggling via Go net/http in NVIDIA Container Toolkit (CVE‑2025‑228...
osama55-coder
pending
Privilege Escalation in NVIDIA Container Runtime Hook via Forged HookState and c...
michaelpierre
pending