Patch Now: NVDIA Flaws Expose AI Models, Critical Infrastructure

Researchers disclosed two critical vulnerabilities in the NVIDIA Container Toolkit (CVE-2024-0132 and CVE-2025-23359) that can allow code execution, privilege escalation, host filesystem access, theft of proprietary AI models, and DoS; an initial patch for CVE-2024-0132 was incomplete, a secondary flaw was later patched, and affected organizations using NVIDIA GPUs, Docker, or default toolkit configurations are urged to apply updates, restrict Docker API access, and harden container runtimes.