CVE-2026-65086

Katalog CVE

CVSS 6.8 · Medium EPSS 2,4%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada nvidia openshell. Skor CVSS 3.1 6.8 (Medium) menurut nvidia.com.

Deskripsi (NVD)

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.

Advisory KUTIM-CSIRT

• Peringatan Keamanan: Rekapitulasi 18 Kerentanan NVIDIA NemoClaw dan OpenShell 16 Sep 2026

Rincian

Terbit di NVD

25 Agustus 2026

Terakhir diubah

3 September 2026

Status NVD

Analyzed

CVSS 3.1

6.8 (Medium), sumber nvidia.com
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

2,4% peluang dieksploitasi; lebih tinggi dari 83,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://nvd.nist.gov/vuln/detail/CVE-2026-65086 pemerintah AS · advisory pihak ketiga
• https://www.cve.org/CVERecord?id=CVE-2026-65086 advisory pihak ketiga
• https://github.com/NVIDIA/product-security/tree/main/2026/5872 product