CVE-2026-65091

Katalog CVE

CVSS 8.8 · High EPSS 2,6%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada nvidia openshell. Skor CVSS 3.1 8.8 (High) menurut nvidia.com.

Deskripsi (NVD)

NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

Advisory KUTIM-CSIRT

• Peringatan Keamanan: Rekapitulasi 18 Kerentanan NVIDIA NemoClaw dan OpenShell 16 Sep 2026

Rincian

Terbit di NVD

25 Agustus 2026

Terakhir diubah

2 September 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber nvidia.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

2,6% peluang dieksploitasi; lebih tinggi dari 84,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/NVIDIA/product-security/tree/main/2026/5872 patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-65091 pemerintah AS
• https://www.cve.org/CVERecord?id=CVE-2026-65091 advisory pihak ketiga