Faulty Nvidia Bug Patch Puts AI Containers at Risk

Trend Micro Finds Security Gap in Nvidia Container Toolkit Rashmi Ramesh (rashmiramesh_) • April 15, 2025

Users of software developed by AI powerhouse Nvidia for running containerized software on its GPU chips could still be vulnerable to hacks even if they applied a September 2024 patch, warns cybersecurity firm Trend Micro.

See Also: Fortinet Expands FortiAI Across Security Fabric Platform

Researchers said that a recently patched vulnerability in Nvidia Container Toolkit didn't completely fix the flaw, tracked as CVE-2024-0132.

The vulnerability is linked to how the nvidia-container-cli component manages device file mounts inside containers. The update corrected one exploitation path but did not prevent similar attacks through alternate methods, researchers said.

Exploitation of the vulnerability could lead to "unauthorized access to sensitive host data, theft of proprietary AI models or intellectual property, severe operational disruptions, and prolonged downtime due to resource exhaustion or system inaccessibility," wrote the report ...