A critical vulnerability in the NVIDIA Container Toolkit and GPU Operator allows low-privileged attackers to achieve arbitrary code execution with elevated privileges.

This flaw (CWE-426: Untrusted Search Path) exists within container initialization hooks, where improper handling of search paths permits an attacker with low privileges to manipulate the execution environment.

The ability for a low-privileged user to execute arbitrary code with elevated permissions poses a severe threat to containerized environments. This could lead to a full compromise of the host system, unauthorized data exfiltration, or complete loss of control over the affected GPU-accelerated workloads. The high CVSS score of 9.0 reflects the significant potential for lateral movement and total system impact.

Immediate Action: Update the NVIDIA Container Toolkit and NVIDIA GPU Operator to the latest available versions per the vendor advisory.

Proactive Monitoring: Monitor system logs for unexpected execution of binaries or suspicious process spawning during container startup phases.

Compensating Controls: Implement strict container runtime security policies and restrict the ability of low-privileged users to modify or influence container configuration files.

Public Exploit Available: Yes — multiple public proof-of-concept repositories exist on GitHub.

Given the critical severity and the presence of public exploit code, organizations must prioritize patching these components immediately. Failure to update may allow an attacker to escalate privileges and compromise the integrity of the entire container host infrastructure.