NVIDIA Nsight Systems OS Command Injection Vulnerability in Gfx_Hotspot Recipe

A command injection vulnerability has been identified in NVIDIA Nsight Systems within the gfx_hotspot recipe. This issue allows an attacker to inject malicious strings into the process_nsys_rep_cli.py script, but only if the script is executed manually. Exploiting this vulnerability could result in unauthorized code execution, elevated privileges, data manipulation, service disruption, and unintended information exposure.

Impact

Successful exploitation could lead to arbitrary code execution, privilege escalation, unauthorized data modification, denial of service, and disclosure of sensitive information.

Remediation

Users are advised to upgrade to the latest version of the NVIDIA CUDA Toolkit, available on the CUDA Toolkit Downloads page.