NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering.

CVE-2026-65092 affects NVIDIA OpenShell Sandbox for Linux, where an attacker can exploit a path traversal vulnerability to bypass L7 REST network policy controls. The vulnerability could allow unauthorized access to sensitive information and enable data tampering. The flaw resides in the network policy enforcement layer, specifically the Layer 7 REST policy mechanism. Successful exploitation does not appear to require authentication but likely requires network access. NVIDIA has published a security advisory via their product-security GitHub repository. The vulnerability has been assigned a high criticality rating. Affected users are advised to review NVIDIA's advisory for patches or mitigations.