CVE-2026-65091 - NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection

Back Back to CVE browser

HIGH

NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection

Published Aug 25, 2026

8.8

HIGH

CVSS 3.1

EPSS 2.60%

Description

NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

Affected products

Vendor NVIDIA Product OpenShell Default
unaffected
Affected
- 0 to 0.0.33

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
NVIDIA	OpenShell	unaffected	Affected 0 to 0.0.33

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-66090
Advisory
https://github.com/NVIDIA/product-security/tree/main/2026/5872
Patch
https://nvd.nist.gov/vuln/detail/CVE-2026-65091
US Government Resource
https://www.cve.org/CVERecord?id=CVE-2026-65091
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-66090		Advisory
https://github.com/NVIDIA/product-security/tree/main/2026/5872		Patch
https://nvd.nist.gov/vuln/detail/CVE-2026-65091		US Government Resource
https://www.cve.org/CVERecord?id=CVE-2026-65091		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner nvidia

Published Aug 25, 2026

Updated Aug 26, 2026

Reserved Jul 21, 2026

Link CVE-2026-65091

CISA Vulnrichment

Updated Aug 26, 2026

NVD

Status Analyzed

Modified Sep 2, 2026

Link CVE-2026-65091

Red Hat

No data

ENISA EUVD

Assigner nvidia

Published Aug 25, 2026

Updated Aug 26, 2026

Link EUVD-2026-66090

GitHub

No data