CriticalCritical vulnerability

CVE-2026-65162 (CVSS 10.0)

NVD · officialPublished Oct 13, 2026Risk 50/100

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.

Technical details

CVSS

10.0

AV:NetworkAC:LowPR:NoneUI:NoneC:HighI:HighA:High

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source