Path Traversal Vulnerability in NVIDIA Infrastructure Controller for Linux
CVE-2026-65125

6.6MEDIUM

Key Information:

Vendor

Nvidia
Status
Infrastructure Controller
Vendor
CVE Published:
22 September 2026

What is CVE-2026-65125?

The NVIDIA Infrastructure Controller for Linux is susceptible to a path traversal vulnerability that allows an attacker to manipulate file names or paths externally. Successful exploitation could lead to unauthorized code execution, privilege escalation, potential data tampering, and denial of service, posing significant risks to data integrity and system availability.

Affected Version(s)

Infrastructure Controller Linux 0 to 1.9

References

https://nvd.nist.gov/vuln/detail/CVE-2026-65125
https://www.cve.org/CVERecord?id=CVE-2026-65125
https://github.com/NVIDIA/product-security/tree/main/2026...

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.