NVIDIA Isaac Lab SB3 Configuration Parsing Vulnerability Leading to Code Execution and Privilege Escalation

A vulnerability has been identified in the SB3 configuration parsing of the NVIDIA Isaac Lab component within the NVIDIA Isaac Sim framework. This vulnerability could be exploited to execute code, cause a denial of service, escalate privileges, disclose information, or tamper with data. It affects all versions of Isaac Lab prior to 2.2.1.

Impact

Exploitation of this vulnerability could result in unauthorized code execution, a denial of service, elevated privileges, unauthorized information disclosure, or data manipulation.

Remediation

Users are advised to update to the latest version of NVIDIA Isaac Lab, available in the NVIDIA GitHub repository.