NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.

A high-severity vulnerability (CVE-2026-65083) has been identified in NVIDIA OpenShell for Linux, specifically within its sandbox provisioning API. The flaw allows an attacker to cause an incomplete list of disallowed inputs, effectively bypassing sandbox restrictions. Successful exploitation of this vulnerability can lead to multiple severe impacts including arbitrary code execution, escalation of privileges, information disclosure, data tampering, and denial of service. The vulnerability is classified with a high criticality rating. NVIDIA has published a security advisory through their product-security GitHub repository. The issue affects the Linux version of NVIDIA OpenShell and is tracked by both the NVD and CVE databases. Users and administrators running affected versions are advised to review NVIDIA's advisory for remediation guidance.