NVIDIA Container Toolkit TOCTOU (CVE-2025-23359)
Date: 2025
Affected: NVIDIA Container Toolkit (Linux)
Attack vector: sandbox-escape
Category: vulnerability-disclosure
Severity: Critical

NVIDIA Container Toolkit for Linux contains a TOCTOU vulnerability in default configuration where a crafted container image could gain access to the host file system.


Mitigations:

Architectural layers (MAESTRO):