Security Bulletin: NVIDIA Networking BlueField, ConnectX - September 2026

NVIDIA has released a software update for NVIDIA® Networking BlueField, ConnectX. To protect your system, download and install the latest NVIDIA firmware from the links provided in this bulletin. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities...

CVE-2026-65093

A flaw was found in NVIDIA OpenShell. A remote authenticated attacker can exploit this vulnerability to escape the isolated sandbox environment. Successful exploitation can lead to arbitrary code execution, privilege escalation, and unauthorized access to data on the underlying host system...

CVE-2026-65083

A flaw was found in NVIDIA OpenShell. The sandbox provisioning Application Programming Interface API fails to properly enforce restrictions on disallowed inputs. An authenticated remote attacker could exploit this vulnerability by submitting crafted input to bypass sandbox boundaries. Successful...

langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs

Summary langchain-nvidia-ai-endpoints versions before 1.4.2 accepted local filesystem paths as image inputs for Vision Language Model VLM requests. If an application passed attacker-controlled image input to ChatNVIDIA or VLM reranking APIs, an attacker could cause files readable by the applicati...

GHSA-G28H-2CMM-RJ9X langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs

Summary langchain-nvidia-ai-endpoints versions before 1.4.2 accepted local filesystem paths as image inputs for Vision Language Model VLM requests. If an application passed attacker-controlled image input to ChatNVIDIA or VLM reranking APIs, an attacker could cause files readable by the applicati...

PT-2026-105510

Summary langchain-nvidia-ai-endpoints versions before 1.4.2 accepted local filesystem paths as image inputs for Vision Language Model VLM requests. If an application passed attacker-controlled image input to ChatNVIDIA or VLM reranking APIs, an attacker could cause files readable by the applicati...

openshell: NVIDIA OpenShell: sandbox escape leading to code execution and privilege escalation

A flaw was found in NVIDIA OpenShell. A remote authenticated attacker can exploit this vulnerability to escape the isolated sandbox environment. Successful exploitation can lead to arbitrary code execution, privilege escalation, and unauthorized access to data on the underlying host system...

NVIDIA OpenShell: NVIDIA OpenShell: sandbox provisioning API allows code execution via incomplete input filtering

A flaw was found in NVIDIA OpenShell. The sandbox provisioning Application Programming Interface API fails to properly enforce restrictions on disallowed inputs. An authenticated remote attacker could exploit this vulnerability by submitting crafted input to bypass sandbox boundaries. Successful...

Vulnerability of NVIDIA Display Driver and Guest Driver: These drivers for NVIDIA’s virtual graphics processors allow attackers to cause system failures and disclose sensitive information.

The vulnerability of NVIDIA Display Driver and Guest drivers for virtual graphics processors from NVIDIA is related to the disclosure of information. Exploiting this vulnerability can allow attackers to cause system failures and disclose protected information...

Vulnerability of NVIDIA Display Driver and Guest Driver: NVIDIA’s virtual graphics processor drivers allow attackers to trigger service failures.

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to insufficient resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...

Vulnerability of NVIDIA Display Driver and Guest Driver: NVIDIA’s virtual graphics processor drivers allow attackers to execute arbitrary code.

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to incorrect conversion of numerical data types. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Vulnerability of NVIDIA Display Driver and Guest Driver: NVIDIA’s virtual graphics processor drivers allow attackers to escalate their privileges and execute arbitrary code.

The vulnerability of NVIDIA Display Driver and Guest Driver, which are used for virtual graphics processors from NVIDIA, is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow attackers to increase their privileges and execute arbitrary code...

Vulnerability of NVIDIA Display Driver and Guest Driver: NVIDIA’s virtual graphics processor drivers allow attackers to trigger service failures.

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to insecure initialization. Exploiting this vulnerability can allow an attacker to cause system failures...

Vulnerability of NVIDIA Display Driver and Guest Driver: NVIDIA’s virtual graphics processor drivers allow attackers to trigger service failures.

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to the state of the race when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of NVIDIA Display Driver and Guest Driver: NVIDIA’s virtual graphics processor drivers allow attackers to trigger service failures.

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to insufficient control over input data. Exploiting this vulnerability can allow attackers to cause system failures...

Vulnerabilities of NVIDIA Display Driver and Guest Drivers for NVIDIA virtual graphics processors, which allow attackers to escalate their privileges and cause service failures.

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to the lack of authorization. Exploiting this vulnerability can allow attackers to increase their privileges and cause service interruptions...

Vulnerability of NVIDIA Display Driver and Guest Driver: NVIDIA’s virtual graphics processor drivers allow attackers to escalate their privileges and execute arbitrary code.

The vulnerability of NVIDIA Display Driver and Guest Driver, which are used for NVIDIA’s virtual graphics processors, is related to improper resolution saving. Exploiting this vulnerability can allow attackers to increase their privileges and execute arbitrary code...

Vulnerability of NVIDIA Display Driver and Guest Driver: NVIDIA’s virtual graphics processor drivers allow attackers to trigger service failures.

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to insufficient control over input data. Exploiting this vulnerability can allow attackers to cause system failures...

Vulnerability of NVIDIA Display Driver and Guest Driver: NVIDIA’s virtual graphics processor drivers allow attackers to trigger service failures.

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to reading beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2026-65130

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...