CVE-2026-65162

NVIDIA AIStore for Linux has a critical flaw in its legacy ETL Kubernetes PodSpec initialization API. A remote attacker who can reach that API can supply Kubernetes host-namespace and container-security settings without authentication or user interaction. A successful attack can lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service, with impact that can extend beyond the vulnerable component. Organizations running AIStore on Linux with this legacy API enabled are affected. It is not listed in CISA KEV, and no public proof-of-concept is known.

What to do: Treat the legacy ETL Kubernetes PodSpec initialization API as untrusted and do not expose it to untrusted networks. Disable or tightly restrict that legacy API, block remote callers from setting host-namespace or container-security options, and apply the NVIDIA security update for AIStore on Linux as soon as a fixed build is available. Review clusters for pods created through this API that use host namespaces or weakened container security.