AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

NvidiaCVE-2026-65091

Nvidia OpenShell: command injection

Nvidia

CVE-2026-65091 · Published Aug 25, 2026 · updated Sep 2, 2026

High8.8
No fix yet
Nvidia advisory

NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

Affected versions

PackageAffectedFixed in
OpenShell
Product
<= 0 to 0.0.33No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More Nvidia advisories

All Nvidia
Medium 6.9Aug 25Bundled CloudXR libPoco.so statically links libexpat 2.8.1 (CVE-2026-56132 + CVE-2026-56403..56409)CVE-2026-56132no fix yetHigh 8.5Aug 25Nvidia OpenShell: path traversalCVE-2026-65092no fix yetCritical 9.9Aug 25Nvidia OpenShell: code executionCVE-2026-65093no fix yetHigh 7.8Aug 25Nvidia NemoClaw: command injectionCVE-2026-65096no fix yetHigh 7.5Aug 25Nvidia NemoClaw: code executionCVE-2026-65097no fix yetHigh 8.1Aug 25Nvidia NemoClaw: remote code executionCVE-2026-65098no fix yet