GCVE - cpe:2.3:a:nvidia:container_toolkit:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nvidia:container_toolkit:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Nvidia (`40c2793d-f37d-5eb8-a9a9-0c9926e4695b`)
Product	Container Toolkit (`a9f2178d-e32f-55e6-89ec-ed39298f749a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-24260`	vulnerable	2026-07-29 00:32:00.898244	Details available HIGH (8.5) NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, and data tampering. Published: 2026-07-01T14:34:54.537Z Updated: 2026-07-02T03:57:33.130Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2026-24260 https://www.cve.org/CVERecord?id=CVE-2026-24260 https://github.com/NVIDIA/product-security/tree/main/2026/5850	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23359`	vulnerable	2026-06-08 07:10:55.565745	Details available HIGH (8.3) NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Published: 2025-02-12T00:52:43.646Z Updated: 2025-04-11T13:24:14.643Z Open on db.gcve.eu Reference links https://nvidia.custhelp.com/app/answers/detail/a_id/5616	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23267`	vulnerable	2026-06-08 07:10:55.456630	Details available HIGH (8.5) NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service. Published: 2025-07-17T19:32:36.958Z Updated: 2025-11-04T21:09:39.708Z Open on db.gcve.eu Reference links https://nvidia.custhelp.com/app/answers/detail/a_id/5659	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23266`	vulnerable	2026-06-08 07:10:55.456154	Details available CRITICAL (9) NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service. Published: 2025-07-17T19:08:21.352Z Updated: 2026-02-26T17:50:29.124Z Open on db.gcve.eu Reference links https://nvidia.custhelp.com/app/answers/detail/a_id/5659	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0133`	vulnerable	2026-06-08 06:21:58.369054	Details available MEDIUM (4.1) NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering. Published: 2024-09-26T05:21:33.599Z Updated: 2024-09-26T13:30:42.127Z Open on db.gcve.eu Reference links https://nvidia.custhelp.com/app/answers/detail/a_id/5582	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0132`	vulnerable	2026-06-08 06:21:58.358427	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.