Junglewise Threat Intelligence
CVE-2025-23266: GO-2025-3992 - NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator
CVE-2025-23266 · Severity: low · CVSS 3.1 · Published 2025-10-23
Technologies: github.com/NVIDIA/nvidia-container-toolkit (Go). Vendors: Go.
Executive brief
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator
Affected products
- Go github.com/NVIDIA/gpu-operator
- Go github.com/NVIDIA/k8s-device-plugin
- Go github.com/NVIDIA/mig-parted
- Go github.com/NVIDIA/nvidia-container-toolkit