A critical command injection vulnerability in NVIDIA NSIGHT Graphics for Linux exposes systems to potential remote code execution and full system compromise.

This vulnerability is an OS Command Injection (CWE-78) flaw occurring within the NSIGHT Graphics tool. The CVSS vector (AV:L/AC:L/PR:N/UI:R) indicates that while local access is required, the attack can be triggered by an unprivileged user through user interaction, leading to full impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability permits an attacker to execute arbitrary commands with the privileges of the application. This poses a severe business risk, as it could result in the total compromise of the affected workstation, unauthorized access to sensitive development data, and potential lateral movement within the corporate network. Given the CVSS score of 7.8, this is classified as a High severity issue requiring prompt attention.

Immediate Action: Update NVIDIA NSIGHT Graphics to version 2025.5 or later as specified in the official vendor advisory to resolve the underlying command injection flaw.

Proactive Monitoring: Security teams should monitor system logs for suspicious process execution patterns or unexpected shell invocations originating from the NSIGHT Graphics application process.

Compensating Controls: Ensure that users run development tools with the minimum necessary privileges and restrict execution permissions on sensitive system directories to contain the potential impact of command injection.

Public Exploit Available: No (exploit_available: false)

The presence of a command injection vulnerability in a development tool like NSIGHT Graphics presents a substantial risk to internal security environments. IT administrators must prioritize the deployment of the 2025.5 update across all Linux workstations where this software is installed. Failure to patch may allow attackers to leverage the tool as a vector for deeper system infiltration.