NVIDIA Isaac-GR00T Code Injection Vulnerability Allowing Remote Code Execution and Privilege Escalation

A code injection vulnerability has been identified in NVIDIA Isaac-GR00T for all platforms, specifically within a Python component. This vulnerability allows an attacker to inject malicious code, which could be executed, potentially leading to unauthorized access, escalation of privileges, disclosure of sensitive information, and tampering with data.

Impact

Exploitation of this vulnerability could result in arbitrary code execution, unauthorized privilege escalation, disclosure of confidential information, and unauthorized data modification.

Remediation

Users are advised to update to the latest version of NVIDIA Isaac-GR00T that includes the security fix. Instructions for downloading the updated version can be found on the NVIDIA Product Security page.