CVE-2025-23267 NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook
An attacker can exploit a link following vulnerability in the update-ldcache hook to tamper with data and cause denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-23267?
CVE-2025-23267 is a high-severity path traversal vulnerability in NVIDIA Container Toolkit, published on 17 Jul 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service.
Weakness: CWE-59
Which versions are affected by CVE-2025-23267?
12 open source packages ship an affected version, including github.com/NVIDIA/nvidia-container-toolkit, github.com/NVIDIA/gpu-operator and github.com/NVIDIA/k8s-device-plugin.
| Package | Affected | Fixed in |
|---|---|---|
github.com/NVIDIA/nvidia-container-toolkit Go | All versions | 1.17.8 |
github.com/NVIDIA/nvidia-container-toolkit Go | All versions | 1.17.8 |
github.com/NVIDIA/nvidia-container-toolkit Go | All versions | 1.17.8 |
github.com/NVIDIA/gpu-operator Go | All versions | None |
github.com/NVIDIA/gpu-operator Go | All versions | 25.3.2 |
github.com/NVIDIA/gpu-operator Go | All versions | 25.3.2 |
6 more packages
github.com/NVIDIA/k8s-device-plugin Go | All versions | 0.17.3 |
github.com/NVIDIA/k8s-device-plugin Go | All versions | 0.17.3 |
github.com/NVIDIA/k8s-device-plugin Go | All versions | 0.17.3 |
github.com/NVIDIA/mig-parted Go | All versions | 0.12.2 |
github.com/NVIDIA/mig-parted Go | All versions | 0.12.2 |
github.com/NVIDIA/mig-parted Go | All versions | 0.12.2 |
How do I fix CVE-2025-23267?
Upgrade github.com/NVIDIA/nvidia-container-toolkit to 1.17.8 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-23267 being exploited?
There is no known exploitation of CVE-2025-23267 in the wild and no public exploit code.
Sources
Also known as GHSA-67jc-hmvg-q4c7, GO-2025-3998.