OS Command Injection Vulnerability in NVIDIA OpenShell for Linux
CVE-2026-65086

6.8MEDIUM

Key Information:

Vendor

Nvidia
Status
Openshell
Vendor
CVE Published:
25 August 2026

What is CVE-2026-65086?

A vulnerability exists in NVIDIA OpenShell for Linux that affects its sandbox exec handler, allowing attackers to perform OS command injection. This flaw could enable unauthorized code execution, compromising the integrity of the system, leading to potential information disclosure and data tampering. Users are advised to apply the latest patches to mitigate this security risk.

Affected Version(s)

OpenShell All platforms 0 to 0.0.33

References

https://nvd.nist.gov/vuln/detail/CVE-2026-65086
https://www.cve.org/CVERecord?id=CVE-2026-65086
https://github.com/NVIDIA/product-security/tree/main/2026...

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.