CVE-2026-65162

LOWCVSS 10.0 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-250

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-13: 210-13
Referenced assets2 URLs
Full discourse2 posts
  • SecAlerts@SecAlertsCo

    🐳 NVIDIA AIStore CVE-2026-65162: CVSS 10. Unauthenticated remote attacker can inject Kubernetes host-namespace & security settings via the legacy ETL PodSpec API. Full C/I/A loss. Patch now. #cybersecurity #ciso #cto #vulnerabilities https://secalerts.co/vulnerability/CVE-2026-65162?utm_campaign=x https://t.co/KFLo531csJ

    0002083
    892 followersView on X
  • Daily CyberSecurity@Daily_CyberSec

    NVIDIA AIStore vulnerabilities, including a CVSS 10.0 flaw enabling remote code execution, lead 18 fixes across NVIDIA AI tools. Upgrade to AIStore 5.0. #NVIDIA #AIStore #CVE202665162 #CVE202665173 #CVE202665172 #AISecurity #MegatronLM #CyberSecurity https://securityonline.info/nvidia-aistore-vulnerabilities-cve-2026-65162/

    00000280
    13.0K followersView on X

Explore more