CVE · Common Vulnerabilities and Exposures
The public identifier for a disclosed vulnerability; GPU-stack, container-runtime, and BMC entries drive the patch cadence a fleet has to sustain without killing jobs.
Also written as: CVEs
Current numbers
≤1.17.7NVIDIA Container Toolkit versions vulnerable to CVE-2025-23266/NVIDIAScape — through 1.17.7; NVIDIA GPU Operator affected through 25.3.1
9.0CVSS of NVIDIAScape (CVE-2025-23266) — three-line container escape to host root in NVIDIA Container Toolkit
CVSS 10.0CVE-2024-54085 AMI MegaRAC BMC auth-bypass via Redfish; added to CISA KEV 25 Jun 2025; OEM'd across 12+ server vendors