CVE-2024-0133 NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system

What is CVE-2024-0133?

CVE-2024-0133 is a medium-severity vulnerability in NVIDIA Container Toolkit, published on 26 Sep 2024. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering.

Weakness: CWE-367

Which versions are affected by CVE-2024-0133?

3 open source packages ship an affected version, including github.com/NVIDIA/nvidia-container-toolkit. It affects 2 products.

Products include Nvidia Nvidia Container Toolkit, Nvidia Nvidia Gpu Operator.

How do I fix CVE-2024-0133?

Upgrade github.com/NVIDIA/nvidia-container-toolkit to 1.16.2 or later.

Is CVE-2024-0133 being exploited?

There is no known exploitation of CVE-2024-0133 in the wild and no public exploit code.

Other vulnerabilities in NVIDIA Container Toolkit

• CVE-2024-0132 NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability Critical 9.0
• CVE-2025-23359 Race condition in Container Toolkit High 8.3
• CVE-2024-0135 Privilege escalation in NVIDIA Container Toolkit High 7.6
• CVE-2024-0136 Privilege escalation in NVIDIA Container Toolkit High 7.6
• CVE-2024-0137 Privilege escalation in NVIDIA Container Toolkit Medium 5.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as AZL-50181, AZL-50184, GHSA-f748-7hpg-88ch, GO-2024-3237.