An authenticated path traversal vulnerability in NVIDIA OpenShell allows attackers to bypass critical network security policies.

This is a path traversal vulnerability (CWE-22) that affects the L7 REST network policy implementation. An attacker with low-level privileges can manipulate path strings to bypass security boundaries.

The CVSS score of 8.5 indicates a high severity risk, particularly due to the impact on security policy enforcement. A successful exploit could allow an attacker to reach restricted network segments or services that should be protected by the sandbox, leading to unauthorized access or potential data compromise.

Immediate Action: Apply the vendor-provided security updates for NVIDIA OpenShell as soon as they become available.

Proactive Monitoring: Monitor REST API request logs for patterns involving directory traversal characters (such as double dots) and unexpected access attempts to restricted resources.

Compensating Controls: Implement strict input validation at the API gateway level to sanitize paths and prevent traversal sequences from reaching the underlying service.

Public Exploit Available: Unknown

Users of NVIDIA OpenShell should monitor NVIDIA security advisories for the release of a patch addressing this path traversal flaw. In the interim, ensure that user access is restricted to the minimum required levels and monitor API traffic for indicators of traversal attempts.