CVE-2026-63298
|
| |
|
|
Affected software |
NVIDIA |
|
|
|
An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.*' configuration values, an attacker can manipulate the generated lxc.conf file. This flaw enables the attacker to execute arbitrary code on the host system with the privileges of the LXD daemon. |
Link: |
| https://nvd.nist.gov/vuln/detail/CVE-2026-63298 |
