Wiz Research Finds Critical NVIDIA AI Vulnerability Affecting Containers Using NVIDIA GPUs, Including Over 35% of Cloud Environments

Wiz Research disclosed CVE-2024-0132, a critical container-escape vulnerability in the NVIDIA Container Toolkit that allows attackers controlling a container image to mount the host filesystem and escalate to full host takeover; the flaw affects GPU-enabled containerized AI workloads (including Kubernetes with the NVIDIA GPU Operator) and is particularly severe in environments that run untrusted images or allow customers to load their own GPU images—NVIDIA released patches (Container Toolkit v1.16.2, GPU Operator v24.6.2) on Sept 26, 2024 and organizations are urged to prioritize patching and runtime validation.