{"id":"CVE-2026-65162","published":"2026-10-13T13:17:32.837","lastModified":"2026-10-13T16:18:53.587","description":"NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-250"],"vendors":[],"products":[],"references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5889","tags":[]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65162","tags":[]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65162","tags":[]}],"exploitRefs":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5889","tags":[]}],"hasPoc":true,"ai":{"summary":"NVIDIA AIStore for Linux contains a vulnerability in its legacy ETL Kubernetes PodSpec initialization API that allows remote attackers to inject host-namespace and container-security settings, potentially leading to code execution and privilege escalation.","exploitability":"Exploitation is likely straightforward for remote attackers with no authentication required, as the vulnerability exists in an exposed API endpoint that accepts unvalidated Kubernetes configuration parameters.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code on Kubernetes nodes, escalate privileges, and potentially compromise entire containerized workloads across affected clusters.","remediation":"Disable the legacy ETL Kubernetes PodSpec initialization API immediately or upgrade to NVIDIA AIStore version 2.590 or later if available.","detection":"Monitor for unusual Kubernetes PodSpec configurations in API requests, particularly those containing hostPath mounts or privileged container settings, and watch for network connections to the affected API endpoint from external IPs.","tags":["rce","kubernetes","privilege-escalation","container"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:44:11.445Z"}}