NVIDIA NSIGHT Graphics Command Injection Vulnerability Allowing Code Execution and Privilege Escalation

A command injection vulnerability has been identified in NVIDIA NSIGHT Graphics for Linux, affecting all versions prior to 2025.5. This vulnerability allows an attacker to inject commands that could be executed by the system. Exploitation of this vulnerability could lead to unauthorized code execution, escalation of privileges, tampering with data, and causing a denial of service.

Impact

Exploitation of this vulnerability could result in unauthorized code execution, elevated privileges, data manipulation, and a denial of service.

Remediation

Users are advised to update to NVIDIA NSIGHT Graphics version 2025.5. This update can be downloaded from the NVIDIA NSIGHT Graphics download page.