NVIDIA RunAI Improper Communication Channel Restriction Vulnerability Leading to Privilege Escalation and Data Issues

A vulnerability exists in NVIDIA RunAI for all platforms, where improper restrictions on communication channels can be exploited to affect adjacent networks. This vulnerability could lead to unauthorized privilege escalation, data tampering, and information disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing users to gain elevated rights or access. Additionally, it could lead to unauthorized modification of data and disclosure of sensitive information.

Remediation

Users are advised to upgrade to NVIDIA RunAI version 2.22.48 or later. Instructions for upgrading can be found in the NVIDIA RunAI documentation.