CVE-2025-23260 — NVIDIA / AIS Operator

CVE-2025-23260

NVIDIA / AIS Operator PUBLISHED

Description (CNA)

NVIDIA AIStore contains a vulnerability in the AIS Operator where a user may gain elevated k8s cluster access by using the ServiceAccount attached to the ClusterRole. A successful exploit of this vulnerability may lead to information disclosure.

Affected (CNA)

Vendor / product	Versions
NVIDIA / AIS Operator	affected All versions prior 2.3.0

CWE

CWE-266

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5660

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.