The vulnerability, discovered by Wiz researchers, affects both cloud-based and on-premises AI applications using the toolkit

NVIDIA Container Toolkit and GPU Operator were carrying a critical vulnerability that allowed threat actors access to the underlying host’s file system, experts have warned.

The flaw allows a rogue user to escape their container and access entire file systems of the underlying host to perform code execution, and denial of service.

Critical vulnerability in NVIDIA Container Toolkit could allow attackers to escape containers and gain host access. Urgent updates available.