Description
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could run an unauthorized command. A successful exploit of this vulnerability might lead to escalation of privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NVIDIA | Cumulus Linux GA | All versions prior to 5.14 (5.13.x, 5.12.x, and older GA versions) | — |
| NVIDIA | Cumulus Linux LTS | All versions prior to 5.11.4, All versions prior to 5.9.4 | — |
| NVIDIA | NVOS | All versions prior to 1.3 - 25.02.244, All versions prior to 25.02.4282, All versions prior to 25.02.5030 | — |
Advisories 1
- WID-SEC-2026-0483 Nvidia Cumulus Linux: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Feb 24, 2026